1 Overview This document contains enough information to get you started and reproduce our final answers. All the details are located in the README.ANSWERS file. 1.1 Revision $Id: README.1st,v 1.7 2006/07/18 03:13:03 klm Exp $ 1.2 Table of Contents Section 1 .................... Overview Section 1.1 .................. Revision Section 1.2 .................. Table of Contents Section 2 .................... Quick Start 2 Quick Start To produce the final answer set you must have FTimes 3.7.0 installed and the subject image in the following location relative to the project root: evidence_locker/dfrws-2006-challenge.raw FTimes 3.7.0 is downloadable from SourceForge: http://sourceforge.net/project/showfiles.php?group_id=41134 Note: FTimes 3.7.0 will be released during the week of 2006-07-17. Compile and install ftimes using the following commands: % ./configure --prefix=/usr/local --enable-xmagic --with-all-tools % make % make install You will need to have PCRE installed on your system too. We recommend version 6.6 or higher. If your version of PCRE is not installed in a standard location, you may use the '--with-pcre' configure option to specify an alternate location. Make a copy of the following files: first.crv final.crv final.map If you don't do this step, the next step will overwrite them. % cp first.crv first.crv.orig % cp final.crv final.crv.orig % cp final.map final.map.orig You can use these files to confirm that you are getting the same answers as we did. Start by putting a copy of the subject image into the evidence_locker: % mkdir evidence_locker % cp /dfrws-2006-challenge.raw evidence_locker/ Note: Do not use a symlink, here as that would cause some of the make targets to fail. To create the final answer set, run this command: % make carve-final To populate the work tree (requires gnuplot), run this command: % make plots stats carve To populate the database (requires MySQL), run this command: % make load-stats