Robuta

https://www.elastic.co/guide/en/security/8.19/unusual-file-creation-alternate-data-stream.html Unusual File Creation - Alternate Data Stream | Elastic Security [8.19] | Elastic alternate data stream elastic security unusual file creation https://assarbad.net/blog/tag/alternate-data-stream/ alternate data stream | Oliver's /dev/null replacement alternate data stream dev null oliver replacement