Hi void.
Is there any way to get the value of a specific ADS in HEX format? Something similar to
, but for a specific ADS instead of all of them. I tried defining it as a custom property using
Code: Select all
property_alternate_data_stream_utf8
, but that gives me text, which in this case is gibberish (since the ADS is binary). I know I can create a custom column and use Hex(), but in this case I want to get the HEX value via es.exe, and custom columns do not return anything through es.exe.
FWIW, I think that something like property_alternate_data_stream_hex would be very useful for many users.
Thanks in advance.