This Windows binary can download and save a file to an Alternate Data Stream (ADS). This downloads a powersploit tool
that will get computer details. One variant uses ADS.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.