On the GNHLUG-Announce list, Jim Kuzdrall announces the Septempber MerriLUG meeting, “File Carving at Home or Office”
- Who : Andy Bair, Winning Team, 2006 File Carving Challenge
- What : Unscramble randomized data sectors or packets back to files
- Where: Martha's Exchange
- Day : Thur 21 September **Next Week**
- Time : 6:00 PM for grub, 7:30 PM for discussion
:: Overview
Want to undelete some Linux disk files? Piece together fragments of a deleted file? Recover a Windows disk where both FATS are destroyed or missing? Extract files from a network capture? MerriLUG presents Andy Bair with a new and effective approach to file carving that could be used to accomplish these tasks.
Andy Bair (and teammates Klayton Monroe and Jay Smith) won the 2006 File Carving Challenge. The winners developed new tools and techniques which accurately extracted files from a 50MB disk image of containing JPEG, ZIP, HTML, Text, and Microsoft Office files.
Andy's talk will explain the contest, contest data sample, methodology, and tools. There will be examples and a question-answer
session. You might want to build a script to automate his method for your purposes (or entice him to do so). Get contest information at http://www.dfrws.org/2006/challenge/. Get a preview of the team's methodology, updated results and additional information at
http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/.>>> RSVP to Jim Kuzdrall for dinner to assure adequate seating. Driving directions