Difference between pages "Upcoming events" and "Tools:Data Recovery"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Calls For Papers)
 
(Created from Tools page, with additions from recent forensics mailing list postings)
 
Line 1: Line 1:
<b>PLEASE READ BEFORE YOU EDIT THE LISTS BELOW</b><br>
+
= Data Recovery =
Events should be posted in the correct section, and in date order.  An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training).  When events begin the same day, events of a longer length should be listed first.  New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).<br>
+
<i>Some conferences or training opportunities may be <u>limited</u> to <b>Law Enforcement Only</b> or to a specific audience.  Such restrictions should be noted when known.</i>
+
  
This is a BY DATE listing of upcoming conferences and training events relevant to [[digital forensics]]. It is not an all inclusive list, but includes most well-known activities. Some events may duplicate events on the generic [[conferences]] page, but entries in this list have specific dates and locations for the upcoming event.
+
; [[BringBack]]
 +
: http://www.toolsthatwork.com/
 +
: BringBack(tm) offers easy to use, inexpensive, and highly successful data recovery for Windows(tm) & Linux (ext2) operating systems and digital images stored on memory cards, etc.
  
This listing is divided into four sections (described as follows):<br>
+
; [[ByteBack Data Recovery Investigative Suite v4.0]]
<ol><li><b><u>Calls For Papers</u></b> - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)</li><br>
+
: http://www.toolsthatwork.com
<li><b><u>Conferences</u></b> - Conferences relevant for Digital Forensics (Name, Date, Location, URL)</li><br>
+
: Now with UDMA, ATA & SATA support, memory management and greater ease and control of Partition and MBR manipulations, ByteBack continues to uphold it's viability as the computer forensics and recovery application of professionals.
<li><b><u>On-Going / Continuous Training</u></b> - Training opportunities that are either always available online/distance learning format or that are offered the same time every month (Name, date-if applicable, URL)</li><br>
+
<li><b><u>[[Scheduled Training Courses]]</u></b> - Training Classes/Courses that are scheduled for specific dates/locations. This would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Name, Date(s), Location(s), URL) (''note: this has been moved to its own page.'')<br></li></ol>
+
  
The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multi-media Listserv. 
+
; [[RAID Reconstructor]]
<i> (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST)</i>
+
: Runtime Software's [http://www.runtime.org/raid.htm RAID Reconstructor] will reconstruct [[RAID Level 0]] (Striping) and [[RAID Level 5]] drives. People who have used it, love it.
Requests for additions, deletions or corrections to this list may be sent by email to David Baker <i>(bakerd AT mitre.org)</i>.
+
  
== Calls For Papers ==
+
; [[Salvation Data]]
{| border="0" cellpadding="2" cellspacing="2" align="top"
+
: http://www.salvationdata.com
|- style="background:#bfbfbf; font-weight: bold"
+
: Claims to have a program that can read the "[[bad blocks]]" of [[Maxtor]] drives with proprietary commands.
! Title
+
! Due Date
+
! Website
+
|-
+
|JDFSL - Special Issue on Security Issues in Online Communities
+
|Dec 31, 2007
+
|http://www.jdfsl.org/cfp-special-issue.htm
+
|-
+
|HTCIA/ASIS High Technology Crime Conference
+
|Dec 31, 2007
+
|http://htciatraining.org/papers.asp
+
|-
+
|International Association of Forensic Science Annual Meeting
+
|Jan 01, 2008
+
|http://www.iafs2008.com/abstracts/intro.asp
+
|-
+
|Black Hat D.C. 2008 Briefings
+
|Jan 04, 2008
+
|https://cfp.blackhat.com/
+
|-
+
|Usenix Annual Technical Conference
+
|Jan 07, 2008 (11:59PM PST)
+
|http://www.usenix.com/events/usenix08/cfp/
+
|-
+
|6th International Conference on Applied Cryptography and Network Security
+
|Jan 14, 2008 (11:59PM EST)
+
|http://acns2008.cs.columbia.edu/cfp.html
+
|-
+
|ADFSL 2008 Conference on Digital Forensics, Security and Law
+
|Jan 15, 2008 (11:59PM EST)
+
|http://www.digitalforensics-conference.org/callforpapers.htm
+
|-
+
|17th USENIX Security Symposium
+
|Jan 30, 2008 (11:59 PM PST)
+
|http://www.usenix.org/sec08/cfp/
+
|-
+
|Black Hat Europe 2008 Briefings
+
|Feb 01, 2008
+
|https://cfp.blackhat.com/
+
|-
+
|Black Hat USA 2008 Briefings
+
|OPEN ON Feb 01, 2008
+
|https://cfp.blackhat.com/
+
|-
+
|Techno-Security 2008
+
|May 04, 2008
+
|http://www.techsec.com/html/TechnoPapers.html
+
|-
+
|Digital Forensic Research Workshop (DFRWS) 2008
+
|Mar 17, 2008
+
|http://www.dfrws.org/2008/cfp.shtml
+
|-
+
|Black Hat Japan 2008 Briefings
+
|OPEN ON May 01, 2008
+
|https://cfp.blackhat.com/
+
|-
+
|}
+
  
== Conferences ==
 
{| border="0" cellpadding="2" cellspacing="2" align="top"
 
|- style="background:#bfbfbf; font-weight: bold"
 
! Title
 
! Date/Location
 
! Website
 
|-
 
|Digital Forensic Forum Prague 2007
 
|Nov 26-27, Prague, Czech Republic
 
|http://www.dff-prague.com/
 
|-
 
|Association of AntiVirus Asia Researchers (AVAR) International Conference
 
|Nov 28-30, Seoul, Korea
 
|http://www.aavar.org/avar2007/index.html
 
|-
 
|PacSec Applied Security Conference
 
|Nov 29-30, Tokyo, Japan
 
|http://www.pacsec.jp/index.html
 
|-
 
|5th Australian Digital Forensics Conference
 
|Dec 03, Edith Cowan University, Mount Lawley, WA, Australia
 
|http://scissec.scis.ecu.edu.au/conferences2007/index.php?cf=1
 
|-
 
|HTCIA Asia Pacific Training Conference 2007
 
|Dec 12-14, Hong Kong, China
 
|http://2007.htcia.org.hk
 
|-
 
|SANS Security 2008
 
|Jan 11-19, New Orleans, LA
 
|http://www.sans.org/security08/
 
|-
 
|DoD Cyber Crime Conference 2008
 
|Jan 13-18, St. Louis, MO
 
|http://www.dodcybercrime.com/
 
|-
 
|e-Forensics 2008
 
|Jan 21-23, Adelaide, SA, Australia
 
|http://www.e-forensics.eu
 
|-
 
|4th Annual IFIP WG 11.9 International Conference on Digital Forensics
 
|Jan 27-30, Kyoto, Japan
 
|http://www.ifip119-kyoto.org/doku.php
 
|-
 
|ShmooCon
 
|Feb 15-17, Washington, DC
 
|http://www.shmoocon.org/
 
|-
 
|AAFS Annual Meeting 2008
 
|Feb 18-23, Washington, DC
 
|http://aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
 
|-
 
|Blackhat DC 2008 Briefings & Training
 
|Feb 18-21, Washington, DC
 
|http://www.blackhat.com/html/bh-link/briefings.html
 
|-
 
|International Workshop on Digital Forensics (WSDF’08) in Conjunction with ARES 2008
 
|Mar 04–07, Polytechnic University of Catalonia, Barcelona, Spain
 
|http://www.ares-conference.eu/conf/index.php?option=com_content&task=view&id=45
 
|-
 
|CanSecWest Security Conference 2008
 
|Mar 19-21, Vanouver, BC, Canada
 
|http://cansecwest.com/
 
|-
 
|Blackhat Europe 2008 Briefings & Training
 
|Mar 25-28, Amsterdam, Netherlands
 
|http://www.blackhat.com/html/bh-link/briefings.html
 
|-
 
|ADFSL 2008 Conference on Digital Forensics, Security and Law
 
|Apr 23-25, Oklahoma City, OK
 
|http://www.digitalforensics-conference.org
 
|-
 
|Microsoft Law Enforcement Tech Conference 2008
 
|Apr 28-30, Redmond, Washington
 
|-
 
|HTCIA/ASIS High Technology Crime Conference
 
|May 06-08, San Francisco, CA
 
|http://htciatraining.org/general_info.asp
 
|-
 
|EuSecWest Security Conference 2008
 
|May 21-22, London, England
 
|http://eusecwest.com/
 
|-
 
|Techno-Security 2008
 
|Jun 01-04, Myrtle Beach, SC
 
|http://www.techsec.com/html/Techno2008.html
 
|-
 
|6th International Conference on Applied Cryptography and Network Security
 
|Jun 03-06, Columbia University, New York City, NY
 
|http://acns2008.cs.columbia.edu/
 
|-
 
|Usenix Annual Technical Conference
 
|Jun 22-27, Boston, MA
 
|http://www.usenix.com/events/usenix08/
 
|-
 
|International Association of Forensic Sciences Annual Meeting
 
|Jul 21-26, New Orleans, LA
 
|http://www.iafs2008.com/
 
|-
 
|17th USENIX Security Symposium
 
|Jul 28-Aug 01, San Jose, CA
 
|http://www.usenix.org/events/sec08/
 
|-
 
|Blackhat USA 2008 Briefings & Training
 
|Aug 02-07, Las Vegas, NV
 
|http://www.blackhat.com/html/bh-link/briefings.html
 
|-
 
|Defcon 16
 
|Aug 08-10, Las Vegas, NV
 
|http://www.defcon.org
 
|-
 
|Digital Forensic Research Workshop
 
|Aug 11-13, Baltimore, MD
 
|http://www.dfrws.org
 
|-
 
|}
 
  
== On-going / Continuous Training ==
+
=Partition Recovery=
{| border="0" cellpadding="2" cellspacing="2" align="top"
+
; [[Partition Table Doctor]]
|- style="background:#bfbfbf; font-weight: bold"
+
: http://www.ptdd.com/index.htm
! Title
+
 
! Date/Location or Venue
+
; [[parted]]
! Website
+
: The Linux partition management tool.
|-
+
 
|Basic Computer Examiner Course - Computer Forensic Training Online
+
; [[Active Partition Recovery]]
|Distance Learning Format
+
 
|http://www.cftco.com
+
; [[gpart]]
|-
+
: http://www.stud.uni-hannover.de/user/76201/gpart/
|Linux Data Forensics Training
+
 
|Distance Learning Format
+
; [[Testdisk]]
|http://www.crazytrain.com/training.html
+
: http://www.cgsecurity.org/wiki/TestDisk
|-
+
 
|SANS On-Demand Training
+
==See Also==
|Distance Learning Format
+
[http://support.microsoft.com/?kbid=166997 | Using Norton Disk Edit to Backup Your Master Boot Record]
|http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
+
==Notes==
|-
+
 
|MaresWare Suite Training
+
"fdisk /mbr" restores the boot code in the MBR, but not the partition itself.
|First full week every month, Atlanta, GA
+
|http://www.maresware.com/maresware/training/maresware.htm
+
|-
+
|Evidence Recovery for Windows Vista&trade;
+
|First full week every month, Brunswick, GA
+
|http://www.internetcrimes.net
+
|-
+
|Evidence Recovery for Windows Server&reg; 2003 R2
+
|Second full week every month, Brunswick, GA
+
|http://www.internetcrimes.net
+
|-
+
|Evidence Recovery for the Windows XP&trade; operating system
+
|Third full week every month, Brunswick, GA
+
|http://www.internetcrimes.net
+
|-
+
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
+
|Third weekend of every month (Fri-Mon), Dallas, TX
+
|http://www.md5group.com
+
|-
+
|}
+
==[[Scheduled Training Courses]]==
+

Revision as of 11:18, 30 April 2006

Data Recovery

BringBack
http://www.toolsthatwork.com/
BringBack(tm) offers easy to use, inexpensive, and highly successful data recovery for Windows(tm) & Linux (ext2) operating systems and digital images stored on memory cards, etc.
ByteBack Data Recovery Investigative Suite v4.0
http://www.toolsthatwork.com
Now with UDMA, ATA & SATA support, memory management and greater ease and control of Partition and MBR manipulations, ByteBack continues to uphold it's viability as the computer forensics and recovery application of professionals.
RAID Reconstructor
Runtime Software's RAID Reconstructor will reconstruct RAID Level 0 (Striping) and RAID Level 5 drives. People who have used it, love it.
Salvation Data
http://www.salvationdata.com
Claims to have a program that can read the "bad blocks" of Maxtor drives with proprietary commands.


Partition Recovery

Partition Table Doctor
http://www.ptdd.com/index.htm
parted
The Linux partition management tool.
Active Partition Recovery
gpart
http://www.stud.uni-hannover.de/user/76201/gpart/
Testdisk
http://www.cgsecurity.org/wiki/TestDisk

See Also

| Using Norton Disk Edit to Backup Your Master Boot Record

Notes

"fdisk /mbr" restores the boot code in the MBR, but not the partition itself.