veyepar: A Universal Carving Approach for Database Forensic Analysis

Hi user

Admin Login:

Name: A Universal Carving Approach for Database Forensic Analysis
--client depy --show depy_2016 --room room_LL104 10981 --force
Next: 11 Python Powered Restful API Basics with Web2py

show more... Marks

Author(s):	James Wagner
Location	Room LL104
Date	may Sat 07	Days Raw Files
Start	15:00	First Raw Start	14:55
Duration	30:00	Offset	0:04:36
End	15:30	Last Raw End	15:35
Chapters	00:00 0:09:01 0:19:01 0:25:59
Total cuts_time	26 min.

http://mdp.cdm.depaul.edu/DePy2016/default/schedule
raw-playlist raw-mp4-playlist encoded-files-playlist host tweet mp4 svg png

final audio

assets release.pdf A_Universal_Carving_Approach_for_Database_Forensic_Analysis.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

Forensic tools assist analysts with recovery of data and understanding system events, even when working with corrupted data storage. These tools rely on "file carving" techniques to restore files with damaged metadata by analyzing raw file content. While much of the sensitive data is stored and processed by databases, file carving tools for databases are practically non-existent because most databases (particularly commercial ones) do not document their storage formats. Internally, database content is kept in individual "pages" and follows a unique, yet consistent, set of rules for storage and maintenance. By directly accessing raw database storage, we can recover corrupted contents and reveal user activities that are hidden even from database administrators.

There are a number of database-specific tools developed for recovery and monitoring purposes but they are surprisingly limited in face of corruption or "unintentional" side-effects caused by normal database execution. In this talk, we present a universal tool that seamlessly supports many different databases, rebuilding table and other data content from any remaining storage fragments on disk or in memory. We also demonstrate just how much activity takes place under the hood of a database and present an overview of some things that can be discovered by directly investigating database internals.

Comment:

production notes

2016-05-07/14_55_24.ts Apply: 14:55:24 - 15:01:50 ( 00:06:26 ) S: 14:55:24 - E: 15:05:24 D: 00:10:00 (End: 386.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/14_55_24.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	14:55:24		seconds: 0.0 Wall: 14:55:24
Duration	00:10:00
	15:05:24		seconds: 386.0 Wall: 15:01:50
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/14_55_24.ts Apply: 15:01:50 - 15:05:03 ( 00:03:13 ) S: 14:55:24 - E: 15:05:24 D: 00:10:00 (Start: 386.0) (End: 579.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/14_55_24.ts :start-time=0386.0 --audio-desync=0

	Raw File	Cut List
	14:55:24		seconds: 386.0 Wall: 15:01:50
Duration	00:10:00
	15:05:24		seconds: 579.0 Wall: 15:05:03
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/14_55_24.ts Apply: 15:05:03 - 15:05:24 ( 00:00:21 ) S: 14:55:24 - E: 15:05:24 D: 00:10:00 (Start: 579.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/14_55_24.ts :start-time=0579.0 --audio-desync=0

	Raw File	Cut List
	14:55:24		seconds: 579.0 Wall: 15:05:03
Duration	00:10:00
	15:05:24		seconds: 0.0 Wall: 14:55:24
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/15_05_24.ts Apply: 15:05:24 - 15:06:23 ( 00:00:59 ) S: 15:05:24 - E: 15:15:24 D: 00:10:00 (End: 59.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/15_05_24.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	15:05:24		seconds: 0.0 Wall: 15:05:24
Duration	00:10:00
	15:15:24		seconds: 59.0 Wall: 15:06:23
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/15_05_24.ts Apply: 15:06:23 - 15:15:24 ( 00:09:01 ) S: 15:05:24 - E: 15:15:24 D: 00:10:00 (Start: 59.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/15_05_24.ts :start-time=059.0 --audio-desync=0

	Raw File	Cut List
	15:05:24		seconds: 59.0 Wall: 15:06:23
Duration	00:10:00
	15:15:24		seconds: 0.0 Wall: 15:05:24
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/15_15_24.ts Apply: 15:15:24 - 15:25:24 ( 00:10:00 ) S: 15:15:24 - E: 15:25:24 D: 00:10:00 show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/15_15_24.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	15:15:24		seconds: 0.0 Wall: 15:15:24
Duration	00:10:00
	15:25:24		seconds: 0.0 Wall: 15:15:24
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/15_25_24.ts Apply: 15:25:24 - 15:32:22 ( 00:06:58 ) S: 15:25:24 - E: 15:35:24 D: 00:10:00 (End: 418.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/15_25_24.ts :start-time=00.0 --audio-desync=0

	Raw File	Cut List
	15:25:24		seconds: 0.0 Wall: 15:25:24
Duration	00:10:00
	15:35:24		seconds: 418.0 Wall: 15:32:22
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/15_25_24.ts Apply: 15:32:22 - 15:32:56 ( 00:00:34 ) S: 15:25:24 - E: 15:35:24 D: 00:10:00 (Start: 418.0) (End: 452.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/15_25_24.ts :start-time=0418.0 --audio-desync=0

	Raw File	Cut List
	15:25:24		seconds: 418.0 Wall: 15:32:22
Duration	00:10:00
	15:35:24		seconds: 452.0 Wall: 15:32:56
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

2016-05-07/15_25_24.ts Apply: 15:32:56 - 15:35:24 ( 00:02:28 ) S: 15:25:24 - E: 15:35:24 D: 00:10:00 (Start: 452.0) show more...

vlc ~/Videos/veyepar/depy/depy_2016/dv/room_LL104/2016-05-07/15_25_24.ts :start-time=0452.0 --audio-desync=0

	Raw File	Cut List
	15:25:24		seconds: 452.0 Wall: 15:32:56
Duration	00:10:00
	15:35:24		seconds: 0.0 Wall: 15:25:24
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

audio viz

Rf filename:

root is .../show/dv/location/, example: 2013-03-13/13:13:30.dv

Sequence:

get this:

check and save to add this

2016-05-07/14_55_24.ts
audio viz

audio viz

2016-05-07/15_05_24.ts
audio viz

audio viz

2016-05-07/15_15_24.ts
audio viz

audio viz

2016-05-07/15_25_24.ts
audio viz

audio viz

Veyepar Video Eyeball Processor and Review