BEGIN:VCALENDAR
PRODID;X-RICAL-TZSOURCE=TZINFO:-//Calagator//EN
CALSCALE:GREGORIAN
X-WR-CALNAME:Calagator
METHOD:PUBLISH
VERSION:2.0
BEGIN:VTIMEZONE
TZID;X-RICAL-TZSOURCE=TZINFO:America/Los_Angeles
BEGIN:STANDARD
DTSTART:20081102T020000
RDATE:20081102T020000
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
TZNAME:PST
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
CREATED;VALUE=DATE-TIME:20090203T093512Z
DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20090205T210000
DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20090205T190000
DTSTAMP;VALUE=DATE-TIME:20090203T093512Z
LAST-MODIFIED;VALUE=DATE-TIME:20100302T172056Z
UID:http://calagator.org/events/1250456625
DESCRIPTION:          &#13\;\n                                 PRESENTATI
 ON&#13\;\n&#13\;\n                          Intro to Digital Forensics&#
 13\;\n                     (aka Groveling Through File Systems)&#13\;\n&
 #13\;\n&#13\;\n                                      by&#13\;\n&#13\;\n 
                                 Hal Pomeranz&#13\;\n                    
          Deer Run Associates&#13\;\n&#13\;\n  While it may not be as sex
 y as they make it look on TV\, there are a&#13\;\n  number of powerful O
 pen Source tools available for analyzing file&#13\;\n  systems and recov
 ering data-- even data that may have been deleted by&#13\;\n  the attack
 er. This talk will start with an overview of the standard&#13\;\n  Unix 
 file system architecture and discuss tools for imaging file&#13\;\n  sys
 tems\, suggest a few useful tools and idioms for finding clues in&#13\;\
 n  your images\, and cover how to discover &quot\;interesting&quot\; dat
 a from deleted&#13\;\n  files and re-assemble that data into an actual f
 ile image.&#13\;\n&#13\;\n  Hal Pomeranz is the founder and technical le
 ad of Deer Run Associates\,&#13\;\n  and has been active in the system a
 nd network management/security&#13\;\n  field for over twenty years. As 
 a senior member of the Faculty for the&#13\;\n  SANS Institute\, Hal dev
 eloped the SANS &quot\;Step-by-Step&quot\; course model and&#13\;\n  cur
 rently serves as the track coordinator and primary instructor for&#13\;\
 n  the SANS/GIAC Linux/Unix Security Certification track (GCUX). In 2001
 &#13\;\n  he was given the SAGE Outstanding Achievement Award for his te
 aching&#13\;\n  and leadership in the field of System Administration.&#1
 3\;\n&#13\;\n  Note:&#13\;\n    (1)  The slides for the presentation are
  available at:&#13\;\n         http://www.deer-run.com/~hal/IntroToDigit
 alForensics.pdf&#13\;\n&#13\;\n    (2)  Randal Schwartz will do a live c
 ast of this presentation at:&#13\;\n         http://www.talkshoe.com/tc/
 25652&#13\;\n         You can follow along if you have a web browser\, &
 #13\;\n         and if you register\, you can also participate in the ch
 at\, &#13\;\n         and Randal might relay your questions to the speak
 er.&#13\;\n         The recording of the session will be available after
 ward &#13\;\n         at the same address.&#13\;\n&#13\;\n\n\nTags: linu
 x\, plug\n\nImported from: http://calagator.org/events/1250456625
URL:http://pdxLinux.org
SUMMARY:Portland Linux/Unix Group: Intro to Digital Forensics
LOCATION:Portland State University FAB\, Room 86-09: 1900 SW Fourth Avenu
 e\, Portland Oregon 97201 US
SEQUENCE:1
END:VEVENT
END:VCALENDAR