1
00:00:00,630 --> 00:00:07,350
In the previous videos, we have seen how we can use different tools and techniques for steganography.

2
00:00:07,740 --> 00:00:16,320
Now, as a security expert, how would you detect some hidden files, already hidden files in a particular

3
00:00:16,320 --> 00:00:18,450
folder or a particular drive?

4
00:00:18,750 --> 00:00:23,190
So in this lesson, we will see a tool called Edge Spy.

5
00:00:23,700 --> 00:00:24,820
It is spy.

6
00:00:24,840 --> 00:00:27,420
It stands for alternate data streams.

7
00:00:27,540 --> 00:00:28,180
Right.

8
00:00:28,200 --> 00:00:33,540
This tool will help us to detect hidden files and also help us to delete them.

9
00:00:33,660 --> 00:00:34,230
Right.

10
00:00:34,230 --> 00:00:36,180
So let's see how it works.

11
00:00:38,160 --> 00:00:40,860
See, this is how it looks.

12
00:00:42,210 --> 00:00:44,640
Nothing special, just the basic options.

13
00:00:44,820 --> 00:00:53,430
Like a quick scan for Windows based folder only full scan scan only a particular folders, etc..

14
00:00:53,880 --> 00:00:56,250
Now we will go with full scan.

15
00:00:57,330 --> 00:01:00,720
So it will going to scan all NTFS drives.

16
00:01:01,470 --> 00:01:07,560
To start scanning, simply click on this button which says scan the system for alternate data stream.

17
00:01:08,070 --> 00:01:08,610
Right.

18
00:01:09,930 --> 00:01:15,270
See, it has detected some of the files that we have hidden previously.

19
00:01:15,510 --> 00:01:22,920
Right now, either you can wait for the scan to complete, but it will actually going to take a lot

20
00:01:22,920 --> 00:01:23,700
of time.

21
00:01:23,700 --> 00:01:29,280
Right, because it will go into scan each and every file and folder in your system.

22
00:01:29,790 --> 00:01:32,790
So for now, let's abort scan

23
00:01:35,580 --> 00:01:42,870
and to delete hidden files, simply check on the files which you want to delete and click here.

24
00:01:42,900 --> 00:01:44,850
Remove selected streams.

25
00:01:47,550 --> 00:01:49,310
They will be deleted permanently.

26
00:01:49,320 --> 00:01:50,040
Yes.

27
00:01:51,390 --> 00:01:52,020
Right.

28
00:01:52,020 --> 00:01:54,040
So this is how it is.

29
00:01:54,070 --> 00:01:55,410
Spy works.