Session 07

Requirements for the exercises in these sessions:

• able2.tar.gz (Grundy's Tutorial)
• logs.tar.gz (Grundy's Tutorial)
• practical.floppy.dd (Grundy's Tutorial)
• image_carve.raw (Blackboard) (MD5: 3d76854d53317eee53b33258c3ac87f1)
• A Linux distribution as a VM or bare-metal (e.g., Kali)

• Analysis of tarballed messages
• Splitting images
• Carving partitions with dd
• Carving a picture out of a junkfile with dd