RAID Recovery: Recover your PORN by Sight and Sound

Presented at DEF CON 17 (2009), Aug. 2, 2009, 2 p.m. (50 minutes).

This talk will focus on RAID reassembly. In both Forensics and Data Recovery it is common for there to be PORN not only in Pictures but also in Sound Files and Video Files. The goal is $100 or less, figure out how to reconstruct RAID 0 and RAID 5 arrays using the PORN on the array to help identify the correct order of the drives and the variations in the slice size. This is a demo of how to use those files to figure out the layout for the RAID and how to find the right configuration when it is unknown using PORN.

Presenters:

• Scott Moulton - Forensic Strategy Services, LLC. / System Specialist
  Scott Moulton is a data recovery specialist and forensic expert out of Atlanta at My Hard Drive Died where he uses his forensics experience to recover hard drives. Currently Scott Moulton is teaching classes on physically rebuilding damaged hard drives for SANS in a course titled SEC606 Forensic Data Recovery.

Links:

• https://defcon.org/html/defcon-17/dc-17-speakers.html#Moulton
• https://infocon.org/cons/DEF CON/DEF CON 17/DEF CON 17 video and slides/DEF CON 17 - Scott Moulton - RAID Recovery Recover Your PORN Sight and Sound - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=5ObWGUs09y4

Similar Presentations:

• DEF CON 18 (2010) / Google Toolbar: The NARC Within
• HOPE Number Nine (2012) / The Internet is for Porn! Internet Innovation and Information Security
• A New HOPE (2022) / Porn Platforms Hate Them for Exposing Their Mischief With These Two Weird Tricks