[Novalug] SMART -- status of Andy Rosen's mulled talk on SMART?
Paul D. Bain
paulbain at pobox.com
Tue Oct 7 12:41:30 EDT 2008
greg pryzby wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> I will respond since I get mails occassionally asking when YOU will give
> your follow up talk ;)
> 1) When can you speak to us again?
> 2) We are interested in SMART.
> Sept is booked.
> December is booked (Keith?)
> Oct/Nov are OPEN
> We are in Reston now.
> Feel free to hit me off list w/ month choice and something I can put online.
> Stevens R. Miller wrote:
>> Hey All,
>> About a year ago, I gave a short talk to NOVALUG about using Linux for
>> computer forensics. I had intended to include a section on SMART (a superb
>> commercially available forensics product), but a combination of
>> time-constraints and video problems forced me to cut that out.
>> Now, my friend Andy Rosen (the creator and owner of SMART) has said he'd be
>> willing to come up from The Deep South and give us a presentation (assuming,
>> of course, that schedules cooperate). If NOVALUG is interested, let me know
>> and tell me who Andy needs to coordinate with, and we'll do it.
>> Andy is a great guy and has a lot of war stories, so I'm sure he'd be better
>> at telling us about his program than I ever would.
Could someone please let us know whether we can expect Andy Rosen soon
to talk about SMART?
Other open source software (OSS) forensics tools that I would like to
see discussed would include these: The Sleuth Kit (TSK), Autopsy, OCFA
(by the Dutch police), BackTrack Live CD, file carvers (e.g., Foremost,
PhotoRec, and Scalpel), and _maybe_ Helix. I understand that Helix may
not be completely OSS. If so, then I probably am not interested in
hearing a talk about it.
I would also like to know how these tools compare to the proprietary
forensics tools, especially EnCase and FTK, which are the most popular
of these proprietary tools.
More information about the Novalug