A relatively unknown compatibility feature of NTFS, Alternate Data Streams (ADS) provides hackers with a method of hiding root kits or hacker tools on a breached system and allows them to be executed without being detected by the systems administrator.

Alternate Data Streams are extremely easy to make and require little or no skill on the part o the hacker. Common DOS commands like