The Hidden Attribute
Another file attribute that can be used to hide data is the hidden attribute. Files can have any combination of read-only, archive, system, and hidden attributes. Files with the hidden attribute set are not immediately viewable through Windows Explorer or via the dir command typed at the command prompt. The user or administrator has to “tell” Windows Explorer to reveal files with the hidden attribute set by selecting “Tools” and then “Folder Options” from the menu bar, as shown in Figure 3-1.
Figure 3-1. Folder Options Dialog.
Figure 3-1 illustrates the Folder Options dialog for Windows Explorer on a Windows XP system. By ...
Get Windows Forensics and Incident Recovery now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
