[GNHLUG] SLUG Meeting 1/8/07 at 7pm in Durham: Andy Bair re-presents his "File Carving" talk.

[Robert E. Anderson]

What : File Carving
Who  : Andy Bair 
Day  : Mon 8 Jan 2007
Time : 7:00 PM
Where: Room 301, Morse Hall, UNH, Durham, NH

Andy Bair, Klayton Monroe, and Jay Smith were announced as winners of the 2006 
File Carving Challenge at the 6th Annual Digital Forensic Research Workshop 
(DFRWS). Challenge participants were asked to develop new tools and 
techniques to extract as many files as possible from a DFRWS-prepared data 
set while reducing the number of false positives. Data carving techniques are 
used during digital forensic investigations and existing file carving tools 
typically produce many false positives.

Andy will present the results of the challenge, following this draft outline.

- Introduction to File Carving
- 2006 File Carving Challenge
- Methodology
   - FTimes Overview
   - FTimes XMagic
   - Compute and Plot Statistics
   - FTimes Enumeration of File Structures
- Conclusion

For directions and related web links visit the http://slug.gnhlug.org website 
Events section.

-- 
--------------------------------------------------------------
 Robert E. Anderson  		 	email: rea at sr.unh.edu
 Systems Programmer			phone: (603) 862-3489
 UNH Research Computing Center		  fax: (603) 862-1761
--------------------------------------------------------------