| Andy Bair is active in the field of digital forensics, and has a really good presentation on "File Carving". | |||||||||
| Deleted: | |||||||||
| < < |
He is scheduled to give this presentation at the Mon 5 Mar 2007 meeting of CentraLUG. | ||||||||
Presentation brochureWant to undelete some Linux disk files? Piece together fragments of a deleted file? Recover a Windows disk where both FATS are destroyed or missing? Extract files from a network capture? Andy Bair presents a new and effective approach to file carving that could be used to accomplish these tasks. | |||||||||
| Line: 18 to 16 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| Past presentations include: | |||||||||
| Changed: | |||||||||
| < < |
| ||||||||
| > > |
| When | Where | Announcement | Notes | | ||||||||
| | 20 Sep 2006 | MerriLUG | | |||||||||
| Changed: | |||||||||
| < < |
Announcement |Notes | | ||||||||
| > > |
Announcement |Notes |
| ||||||||
| Line: 1 to 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| Added: | |||||||||
| > > |
Andy Bair is active in the field of digital forensics, and has a really good presentation on "File Carving".
He is scheduled to give this presentation at the Mon 5 Mar 2007 meeting of CentraLUG.
Presentation brochureWant to undelete some Linux disk files? Piece together fragments of a deleted file? Recover a Windows disk where both FATS are destroyed or missing? Extract files from a network capture? Andy Bair presents a new and effective approach to file carving that could be used to accomplish these tasks. Andy Bair (and teammates Klayton Monroe and Jay Smith) won the 2006 File Carving Challenge. The winners developed new tools and techniques which accurately extracted files from a 50MB disk image of containing JPEG, ZIP, HTML, Text, and Microsoft Office files. Andy's talk will explain the contest, contest data sample, methodology, and tools. There will be examples and a question-answer session. You might want to build a script to automate his method for your purposes (or entice him to do so). Get information on his team's methodology and more at: http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/.Past presentationsPast presentations include:
| ||||||||