GNHLUG Nashua, Thur 21 September, File Carving at Home or Office

[paul_cour at verizon.net]

I assume that the Presentation,
of the meeting will be upstairs
at Martha's ???

-pc


>From: Jim Kuzdrall <gnhlug at intrel.com>
>Date: 2006/09/20 Wed AM 06:38:55 CDT
>To: gnhlug-announce at mail.gnhlug.org
>Subject: GNHLUG Nashua, Thur 21 September, File Carving at Home or Office

>   !!! New! Opt-out RSVP.  See Below. !!!
>
>Who  : Andy Bair, Winning Team, 2006 File Carving Challenge
>What : Unscramble randomized data sectors or packets back to files
>Where: Martha's Exchange
>Day  : Thur 21 September **Tomorrow**
>Time : 6:00 PM for grub, 7:30 PM for discussion
>
>:: Overview
>
>    Want to undelete some Linux disk files?  Piece together fragments of 
>a deleted file?  Recover a Windows disk where both FATS are destroyed 
>or missing?  Extract files from a network capture?  MerriLUG presents 
>Andy Bair with a new and effective approach to file carving that could 
>be used to accomplish these tasks.
>
>    Andy Bair (and teammates Klayton Monroe and Jay Smith) won the 2006 
>File Carving Challenge.  The winners developed new tools and techniques 
>which accurately extracted files from a 50MB disk image containing 
>JPEG, ZIP, HTML, Text, and Microsoft Office files. 
>
>    Andy's talk will explain the contest, contest data sample, 
>methodology, and tools.  There will be examples and a question-answer 
>session.  You might want to build a script to automate his method for 
>your purposes (or entice him to do so).  Get contest information at 
>http://www.dfrws.org/2006/challenge/.  Get a preview of the team's 
>methodology, updated results and additional information at  
>http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/.
>
> >>> RSVP to Jim Kuzdrall for dinner to assure adequate seating. <<<
> !!! New!  If you are a "Regular Attendee", let me know and I will put 
>you on said list.  Then, just let me know if you are NOT coming. !!!
>
>Driving directions:
>http://wiki.gnhlug.org/twiki2/bin/view/Www/PlaceMarthasExchange
>
>Thanks,
>
>Jim Kuzdrall
>gnhlug at intrel.com
>
>_______________________________________________
>gnhlug-announce mailing list
>gnhlug-announce at mail.gnhlug.org
>http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce
>_______________________________________________
>gnhlug-discuss mailing list
>gnhlug-discuss at mail.gnhlug.org
>http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss