From:     Jim Kuzdrall
Subject:  GNHLUG Nashua, Thur 21 September, File Carving at Home or Office
Date:     Thursday, September 14, 2006 11:11:05

Who :  Andy Bair, Winning Team, 2006 File Carving Challenge
What:  Unscramble randomized data sectors or packets back to files
Where: Martha's Exchange
Day :  Thur 21 September **Next Week**
Time:  6:00 PM for grub, 7:30 PM for discussion

:: Overview

    Want to undelete some Linux disk files?   Piece together fragments of
a deleted file?   Recover a Windows disk where both FATS are destroyed
or missing?   Extract files from a network capture?   MerriLUG presents
Andy Bair with a new and effective approach to file carving that could
be used to accomplish these tasks.

    Andy Bair (and teammates Klayton Monroe and Jay Smith) won the 2006
File Carving Challenge.   The winners developed new tools and techniques
which accurately extracted files from a 50MB disk image of containing
JPEG, ZIP, HTML, Text, and Microsoft Office files.

    Andy's talk will explain the contest, contest data sample,
methodology, and tools.   There will be examples and a question-answer
session.   You might want to build a script to automate his method for
your purposes (or entice him to do so).   Get contest information at
http://www.dfrws.org/2006/challenge/.   Get a preview of the team's
methodology, updated results and additional information at
http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/.

  >>> RSVP to Jim Kuzdrall for dinner to assure adequate seating. <<<

Driving directions:
http://wiki.gnhlug.org/twiki2/bin/view/Www/PlaceMarthasExchange

Thanks,

Jim Kuzdrall

_______________________________________________
gnhlug-announce mailing list
http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce