GNHLUG Nashua, Thur 21 September, File Carving at Home or Office

Jim Kuzdrall gnhlug at intrel.com
Thu Sep 14 11:17:01 EDT 2006


Who  : Andy Bair, Winning Team, 2006 File Carving Challenge
What : Unscramble randomized data sectors or packets back to files
Where: Martha's Exchange
Day  : Thur 21 September **Next Week**
Time : 6:00 PM for grub, 7:30 PM for discussion

:: Overview

    Want to undelete some Linux disk files?  Piece together fragments of 
a deleted file?  Recover a Windows disk where both FATS are destroyed 
or missing?  Extract files from a network capture?  MerriLUG presents 
Andy Bair with a new and effective approach to file carving that could 
be used to accomplish these tasks.

    Andy Bair (and teammates Klayton Monroe and Jay Smith) won the 2006 
File Carving Challenge.  The winners developed new tools and techniques 
which accurately extracted files from a 50MB disk image of containing 
JPEG, ZIP, HTML, Text, and Microsoft Office files. 

    Andy's talk will explain the contest, contest data sample, 
methodology, and tools.  There will be examples and a question-answer 
session.  You might want to build a script to automate his method for 
your purposes (or entice him to do so).  Get contest information at 
http://www.dfrws.org/2006/challenge/.  Get a preview of the team's 
methodology, updated results and additional information at  
http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/.

 >>> RSVP to Jim Kuzdrall for dinner to assure adequate seating. <<<

Driving directions:
http://wiki.gnhlug.org/twiki2/bin/view/Www/PlaceMarthasExchange

Thanks,

Jim Kuzdrall
gnhlug at intrel.com

_______________________________________________
gnhlug-announce mailing list
gnhlug-announce at mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce



More information about the gnhlug-discuss mailing list