smb unexpected knowledge

Alternate Data Streams have been around for ages, they are a component of the NTFS file system.

If you want to create an ADS, you just push your content to filename.exe:data.

For example type evilfile.exe > goodtextfile.txt:data.

ADS are most commonly used for the “mark of the web” you see on downloaded files.