How can malware be hidden using NTFS Alternate Data Streams

Question

I am researching Windows security and came across NTFS Alternate Data Streams (ADS) as a technique used to hide malicious files. I want to understand:

• How attackers embed malware into ADS without detection.
• How to list and analyze ADS on a Windows system.
• How security tools detect and mitigate ADS-based attacks.
  A practical example of creating and detecting ADS in PowerShell would be helpful.