Hi folks, I am trying to track down a change to an added data stream. The logs have:
Stream Count old value = 0
new value = 1
Stream SHA-1 old value = da39a3ee5e6b4b0d3255bfef95601890afd80709
new value = 6f01b86dc3a5fc07f2fc8743a88abb1720aa3376
I've checked the element at question and have run couple tools against the directories and have found no added data streams. Are these false positives or is something actually changing? I've also checked the date stamps on all files and nothing has been touched in the time frame mentioned. Any clues?