Presented at
NolaCon 2022,
May 21, 2022, 3 p.m.
(Unknown duration).
<p>My talk will give a little background of myself and start detailing a data
recovery job that some friends and I worked on. We were approached and during our initial talks
they admitted they didn’t really know what kind of system they had, but we needed to get the
data off of it. They thought it was a linux system, like RedHat or something. Turns out it was a
specialized VM that emulated a hardware VAX VMS system so we had no idea what we had
gotten ourselves into. I will go into detail on some initial impressions and observations and the
methodology we used to begin extracting the data off of this system. We ended up successfully
mounting the virtualized RAID array and copying off the data. It turned out that the LKM we used
did not properly decode the data, so we had to write some extra software to convert it into a
usable format.</p>
Presenters:
-
Stephen “geno” Halwes
<p>Geno is a Sr. Research Engineer at Centauri Corp. in Ohio. He leads a team of engineers on multiple projects with software development, reverse engineering, and digital signal processing tasks. His career of almost a decade in infosec has spanned a wide variety of information domains such as IT, penetration testing, post-exploitation development, hardware and software reverse engineering, software development, digital signal processing, and leading "lunch and learns" and training sessions. His weapon of choice is C and he enjoys writing code and learning more about technology. </p>
Links:
Similar Presentations: