...
- They have the FILE_ATTRIBUTE_REPARSE_POINT, FILE_ATTRIBUTE_HIDDEN, and FILE_ATTRIBUTE_SYSTEM file attributes set.
- They also have their access control lists (ACLs) set to deny read access to everyone.
...
| Warning | ||
|---|---|---|
| ||
Some mounting tools do not respect these permissions and therefore allow software applications to follow the links. As the links are hard coded into the filesystem, they unfortunately can point to actual folder locations on the forensic workstation. |
...