[PLUG] ANNOUNCEMENT: February PLUG Meeting

David Mandel dmandel at pdxLinux.org
Tue Feb 3 09:28:11 UTC 2009


                            MEETING ANNOUNCEMENT

                       The Portland Linux/Unix Group
                                 will meet
                         7 PM Thursday Feb 5, 2008
                                     at
                         Portland State University
                                   in the
                              Fariborz Maseeh
             College of Engineering & Computer Science Building
                              Room FAB 86-01
                       (This is in the basement.)
          The building is on SW 4th across from SW College Street.
       See location H-10 on map at http://pdxLinux.org/campus_map.jpg

    *******************************************************************

                                PRESENTATION

                         Intro to Digital Forensics
                    (aka Groveling Through File Systems)


                                     by

                                Hal Pomeranz
                            Deer Run Associates

 While it may not be as sexy as they make it look on TV, there are a
 number of powerful Open Source tools available for analyzing file
 systems and recovering data-- even data that may have been deleted by
 the attacker. This talk will start with an overview of the standard
 Unix file system architecture and discuss tools for imaging file
 systems, suggest a few useful tools and idioms for finding clues in
 your images, and cover how to discover "interesting" data from deleted
 files and re-assemble that data into an actual file image.

 Hal Pomeranz is the founder and technical lead of Deer Run Associates,
 and has been active in the system and network management/security
 field for over twenty years. As a senior member of the Faculty for the
 SANS Institute, Hal developed the SANS "Step-by-Step" course model and
 currently serves as the track coordinator and primary instructor for
 the SANS/GIAC Linux/Unix Security Certification track (GCUX). In 2001
 he was given the SAGE Outstanding Achievement Award for his teaching
 and leadership in the field of System Administration.

    *******************************************************************

        Agenda:

            7:00 - 7:30  Business
                 We will discuss the status of our ongoing projects
                 including PLUG's monthly Advanced Topics meetings,
                 PLUG's monthly hands on clinics, PLUG for Education,
                 etc.

            7:30 - 8:30  Presentation

                 See above

            9:00 - ...  Beer
                                Jax Bar And Restaurant
                                826 SW 2nd Avenue
                                Portland
                                (Note:  We no longer use the Lucky Lab.)

                                        David Mandel
                                        Chief Activist
                                        Portland Linux/Unix Group
                                        560 SE Alexander
                                        Corvallis, Oregon 97333
                                        (541) 730-5285 mobile
                                        dmandel at pdxLinux.org

        P.S.  The Mid Willamette Valley Linux Users Group meets
              every month.  They are currently meeting at 6:00 PM
              on the third Wednesday of the month at the Corvallis
              Chamber of Commerce in Corvallis.
              As of May 2008, the Mid Willamette Valley Linux Users
              Group was under reconstruction.  Once this is done
              see http://www.lug.corvallis.or.us/ for details.

        P.S.  The Eugene Linux Users Group meets several times a month.
              See http://www.euglug.org for details.

======================================================================
David Mandel                        http://www.DavidMandel.com
Portland Linux/Unix Group           http://pdxLinux.org
LinuxFund                           http://LinuxFund.org
======================================================================



More information about the PLUG mailing list