GNHLUG Nashua, Thur 21 September, File Carving at Home or Office

Dan Miller rambi.dev at gmail.com
Wed Sep 20 19:19:00 EDT 2006


Count me in

Jim Kuzdrall wrote:
> Who  : Andy Bair, Winning Team, 2006 File Carving Challenge
> What : Unscramble randomized data sectors or packets back to files
> Where: Martha's Exchange
> Day  : Thur 21 September **Next Week**
> Time : 6:00 PM for grub, 7:30 PM for discussion
> 
> :: Overview
> 
>     Want to undelete some Linux disk files?  Piece together fragments of 
> a deleted file?  Recover a Windows disk where both FATS are destroyed 
> or missing?  Extract files from a network capture?  MerriLUG presents 
> Andy Bair with a new and effective approach to file carving that could 
> be used to accomplish these tasks.
> 
>     Andy Bair (and teammates Klayton Monroe and Jay Smith) won the 2006 
> File Carving Challenge.  The winners developed new tools and techniques 
> which accurately extracted files from a 50MB disk image of containing 
> JPEG, ZIP, HTML, Text, and Microsoft Office files. 
> 
>     Andy's talk will explain the contest, contest data sample, 
> methodology, and tools.  There will be examples and a question-answer 
> session.  You might want to build a script to automate his method for 
> your purposes (or entice him to do so).  Get contest information at 
> http://www.dfrws.org/2006/challenge/.  Get a preview of the team's 
> methodology, updated results and additional information at  
> http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/.
> 
>  >>> RSVP to Jim Kuzdrall for dinner to assure adequate seating. <<<
> 
> Driving directions:
> http://wiki.gnhlug.org/twiki2/bin/view/Www/PlaceMarthasExchange
> 
> Thanks,
> 
> Jim Kuzdrall
> gnhlug at intrel.com
> 
> _______________________________________________
> gnhlug-announce mailing list
> gnhlug-announce at mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce
> 



More information about the gnhlug-discuss mailing list