From: "Robert E. Anderson" Subject: [GNHLUG] SLUG Meeting 1/8/07 at 7pm in Durham: Andy Bair re-presents his "File Carving" talk. Date: Thursday, January 04, 2007 08:44:21 What : File Carving Who : Andy Bair Day : Mon 8 Jan 2007 Time : 7:00 PM Where: Room 301, Morse Hall, UNH, Durham, NH Andy Bair, Klayton Monroe, and Jay Smith were announced as winners of the 2006 File Carving Challenge at the 6th Annual Digital Forensic Research Workshop (DFRWS). Challenge participants were asked to develop new tools and techniques to extract as many files as possible from a DFRWS-prepared data set while reducing the number of false positives. Data carving techniques are used during digital forensic investigations and existing file carving tools typically produce many false positives. Andy will present the results of the challenge, following this draft outline. - Introduction to File Carving - 2006 File Carving Challenge - Methodology - FTimes Overview - FTimes XMagic - Compute and Plot Statistics - FTimes Enumeration of File Structures - Conclusion For directions and related web links visit the http://slug.gnhlug.org website Events section. -- -------------------------------------------------------------- Robert E. Anderson email: rea@sr.unh.edu Systems Programmer phone: (603) 862-3489 UNH Research Computing Center fax: (603) 862-1761 -------------------------------------------------------------- gnhlug-announce mailing list gnhlug-announce@mail.gnhlug.org http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce/