text:
FOR526: Advanced Memory Forensics & Threat Detection
Course Syllabus · 36.0 CPEs · Lab Requirements
Access Period: 4 months · Price: 7,020 USD · Instructor: Alissa Torres
FOR526: An In-Depth Memory Forensics Training Course
Malware Can Hide, But It Must Run
Digital Forensics and Incident Response (DFIR) professionals need Windows memory forensics training to be at the top of their game. Investigators who do not look at volatile memory are leaving evidence at the crime scene. RAM content holds evidence of user actions, as well as evil processes and furtive behaviors implemented by malicious code. It is this evidence that often proves to be the smoking gun that unravels the story of what happened on a system.
FOR526: Memory Forensics In-Depth provides the critical skills necessary for digital forensics examiners and incident responders to successfully perform live system memory triage and analyze captured memory images. The course uses the most effective freeware and open-source tools in the industry today and provides an in-depth understanding of how these tools work. FOR526 is a critical course for any serious DFIR investigator who wants to tackle advanced forensics, trusted insider, and incident response cases.
In today's forensics cases, it is just as critical to understand memory structures as it is to understand disk and registry structures. Having in-depth knowledge of Windows memory internals allows the examiner to access target data specific to the needs of the case at hand. For those investigating platforms other than Windows, this course also introduces OSX and Linux memory forensics acquisition and analysis using hands-on lab exercises.
There is an arms race between analysts and attackers. Modern malware and post-exploitation modules increasingly employ self-defense techniques that include more sophisticated rootkit and anti-memory analysis mechanisms that destroy or subvert volatile data. Examiners must have a deeper understanding of memory internals in order to discern the intentions of attackers or rogue trusted insiders. FOR526 draws on best practices and recommendations from experts in the field to guide DFIR professionals through acquisition, validation, and memory analysis with real-world and malware-laden memory images.
FOR526: Memory Forensics in-Depth will teach you:
- Proper Memory Acquisition: Demonstrate targeted memory capture to ensure data integrity and overcome obstacles to Acquisition/Anti-Acquisition Behaviors.
- How to Find Evil in Memory: Detect rogue, hidden, and injected processes, kernel-level rootkits, Dynamic Link Libraries (DLL) hijacking, process hollowing, and sophisticated persistence mechanisms.
- Effective Step-by-Step Memory Analysis Techniques: Use process timelining, high-low-level analysis, and walking the Virtual Address Descriptors (VAD) tree to spot anomalous behavior.
- Best Practice Techniques: Learn when to implement triage, live system analysis, and alternative acquisition techniques, as well as how to devise custom parsing scripts for targeted memory analysis.
Please plan to arrive 30 minutes early on Day 1 for lab preparation and set-up.
Bootcamp: The authors of FOR526 have added a Bootcamp consisting of additional content and memory forensics challenges to make the course even more relevant for present-day memory forensics investigations and threat detection.
Course Syllabus
FOR526.1: Foundations in Memory Analysis and Acquisition
Simply put, memory analysis has become a required skill for all incident responders and digital forensics examiners. Regardless of the type of investigation, system memory and its contents often expose the "first hit" - the evidential thread that we pull to unravel the whole story of what happened on the target system. Where is the malware? How did the machine get infected? Where did the attacker laterally move? Or what did the disgruntled employee do on the system? What lies in physical memory can provide answers to all of these questions and more.
This section emphasizes the relevance and widening application of memory forensics. It is an easy sell in today's world of increasing encryption, burgeoning media storage capacity, and sophisticated backdoor rootkits. The section provides a six-step investigative methodology for both user and malware investigations that will guide an examiner through the exploration of a memory capture.
Memory forensics is the study of operating systems, which in turn work extensively with the processor and its architecture. Therefore, before we can begin a meaningful analysis of the operating system, we must understand how the underlying components work and fit together. This section explains a number of technologies that are used in modern computers and how they have evolved to where they are today.
In the beginning, there is acquisition. So on day one of FOR526, we will acquire a full capture of physical memory from a compromised virtual machine using two different methods. In comparing live memory triage and full memory capture off-line analysis, we discuss the applications of both methods and when to use each technique in an investigation. Acquisition tools are easy to use, but few understand the underlying mechanisms behind the process.
- Setting up the Windows 10 VM and Ubuntu SIFT
- Identifying a Hidden Process with Volatility
- Live Memory Analysis with Rekall
- Physical Memory Acquisition Using Winpmem
Why Memory Forensics?
- Advantages of Windows
- Case Study: Hibernation File For the Win
- Types of Evidentiary Findings from Memory
Investigative Methodologies
- Use Cases for Memory Forensics
- Six-Step Process for User Investigations
- Six-Step Process for Malware Investigations
The Ubuntu SIFT and Windows 10 Workstations
- SANS Investigative Forensic Toolkit (SIFT) Workstation Review
- Customizations for FOR526 - Memory Forensics Weapons Arsenal
- Tour: Where Are the Tools? How Do I Use Them?
- Overview of Windows 10 VM Workstation
The Volatility Framework
- Exploring the Underpinnings of the Volatility Framework
- Reliance on the KDBG for System Profiling
- Process Enumeration with Pslist and Psscan
- Identifying a Hidden Process
System Architectures
- 32-bit vs. 64-bit Operating Systems
- x86, x86_64, and IA-64 Architectures
- Virtual and Physical Address Spaces
- Physical Address Extensions
- Virtual to Physical Address Translation
Triage vs. Full Memory Acquisition
- Benefits of Live MemoryTriage
- Obstacles and Use Cases for Triage
- Rekall Memory Forensic Framework
- Live Analysis with Rekall's winpmem
Physical Memory Acquisition
- Obstacles to Acquisition/Anti-Acquisition Behaviors
- Device Memory
- Suspended Virtual Machine
- Firewire Acquisition
- Standalone Memory Acquisition Tools
- Winpmem Practical Application with Pagefile Inclusion
FOR526.2: Unstructured Analysis and Process Exploration
Structured memory analysis using tools that identify and interpret operating system structures is certainly powerful. However, many remnants of previously allocated memory remain available for analysis that cannot be parsed through structure identification. What tools are best for processing fragmented data? Unstructured analysis tools! They neither know nor care about operating system structures. Instead, they examine data, extracting useful findings using pattern matching. In this section you will learn how to use bulk extractor to parse memory images and extract investigative leads such as e-mail addresses, network packets, and more.
Many forensics investigators perform physical memory analysis - that is why you are taking this course. But how often do you make use of page file analysis to assist in memory investigations? Carving the page file using traditional file system carving tools is usually a recipe for failure and false positives. In this section you will see why typical file carving tools fail and learn how to parse the page file using YARA for signature matching. You will also learn how to create custom YARA signatures to detect downloaded executable files and extract them from the page file.
Most users are familiar with processes on a Windows system, but not necessarily with how they work under the hood. In this section, we will talk about the operating system components that make up a process, how they fit together, and how they can be exploited by malicious software. We will start with the basics of each process, how it was started, where the executable lives, and what command line options were used. Next we will look at the Dynamic Link Libraries (DLLs) used by a program and how they are found and loaded by the operating system.
Many examiners have used some Volatility plugins, and by now so have you. But what happens when there are no plugins written to perform the investigative task required? Do you throw your hands up and walk away? Not if you are a lethal forensicator! In this module, you will learn to use volshell to examine operating system structures in memory, directly applying this knowledge to solve a real-world problem. You need to extract an executable module from memory for analysis, but the header of the module is paged to disk, concealing critical file alignment data. What do you do? You will learn here how to examine the memory that makes up the module and extract the portions in memory to disk. Intractable problem solved!
- Unstructured Memory Analysis with Bulk Extractor
- Page File Analysis with Page Brute and YARA
- Using Volshell to Dump Executable Modules from Physical Memory
- Understanding Process Relationships and Detecting Stealthy Malware through Memory Analysis
- Discovering Malware Loaded via DLLs through Memory Analysis
Unstructured Memory Analysis
- Introducing Bulk Extractor
- Extracting Network Data from Memory with Bulk Extractor
- File System Artifact Analysis with Scanner Output
- Advanced Encryption Standard (AES) Key Identification
- Finding Case Leads with Bulk Extractor
Page File Analysis
- How the Page File Works
- Using Pattern Matching to Extract Meaningful Page File Contents
- Writing YARA Signatures to Extract Meaningful Hits from the Page File
Exploring Process Structures
- Analyzing the Kernel Debugging Data Structure (KDBG)
- Analyzing Physical Memory Images - How Do the Tools Start?
- Interactive Memory Analysis Using Volshell
- Processes and Process Structures
- The Process Environment Block (PEB)
List Walking and Scanning
- Why Some Tasks Require List Walking While Others Rely on Scanning
- Locating Evidence in Memory Left Over from Previous Boots
- Locating Processes Hidden by Rootkits
- Differential Analysis to Detect Rootkits and Stealthy Malware
Exploring Process Relationships
- What Operating System Structures Keep Track of Processes?
- Using the Psxview Plugin for Differential Analysis
- Detecting Concealed Processes
- Process Anomalies that Indicate Malware
- Using the Pstree Plugin to Enumerate Command Line Options
Exploring Dynamic Link Libraries
- What Is a DLL?
- Inferring Functionality from DLLs
- Examining DLL Properties
- Enumerating DLL Metadata
- Enumerating DLL Imported and Exported Functions
- Understanding DLL Search Order Hijacking
- Listing DLLs Loaded into Processes
- Extracting DLLs from Memory
Pool Memory
- What Is Pool Memory and Why Does It Matter
- Pool Tags and How They Are Used by Windows
- How to Locate Pool Tags
- Pool Tag Protections
Kernel Objects
- Types of Kernel Objects
- Object Header Structures
- Enumerating Kernel Handle Tables
- Enumerating Recently Opened Files in Memory
- Finding Malware by Tracking Mutexes
- Extracting Memory Mapped Files from Memory Dumps
FOR526.3: Investigating the User via Memory Artifacts
Incident responders are often asked to triage a system because of a network intrusion detection system alert. The Security Operation Center (SOC) makes the call and requires more information due to outbound network traffic from an endpoint. The incident response team is asked to respond. This section covers how to enumerate active and terminated TCP connections, selecting the right plugin for the job based on the operating system version.
As we move into the internal structures of a process, virtual address descriptors hold the key to what is contained in the user space memory section. Spotting injected code depends on your ability to analyze what is supposed to be in these sections versus what actually is. This section will make you familiar with dance moves like VADWalk and VADdump, and spotting some DLL injection along the way.
The central theme of section three is user artifact analysis, which makes it a great section to cover the registry. In file system forensics, the registry is a wealth of information on system, software, and user activity. With copies of the registry hives loaded into physical memory, we can undertake the same detailed analysis, including of the volatile hive and keys not found on the file system. Volatility plugins designed specifically for targeting user behavior and evidence of execution are included in our practical application of registry parsing via memory.
This section will also show you how to use the Windows debugger (Windbg ) to perform memory analysis. Using the debugger, you will be able to dump plaintext passwords from memory for logged-on users. Windows stores plaintext passwords in memory for logged-on users. Now you will not need a GPU farm to crack passwords from dumped hashes. Why would a forensic examiner want the suspect's passwords? Because just like everyone else, suspects reuse them! Remember that Truecrypt volume you found on the suspect's machine? Or the encrypted zip file? What do you think the odds are that they used the same password (or an easy permutation) for both?
- Locating Network Connections
- Walking the VAD Tree
- Extracting Artifacts from Memory via VAD Analysis
- Diving Deep with VAD Analysis to Extract Stuxnet's Secrets
- Extracting Plain Text Passwords from Memory
- Extracting Clipboard Contents from Memory
- User Artifacts for Acceptable Use Policy (AUP) Investigations
Network Connections
- Network Differences: XP and Windows 7
- Current Network Connections
- Finding Historical and Hidden Network Connections
- Enumerating Listening Ports
- What's Normal in Network Artifacts
Virtual Address Descriptors
- The VAD Tree Structure
- VAD Nodes
- Walking the VAD Tree
- Finding Malware through VAD Analysis
- Extracting VAD Data from Memory
Detecting Injected Code
- Locating Injected DLLs using VADs
- Finding DLL Injection
- Finding Code in VADs
- Detecting Injected Code with Obfuscated Headers
Analyzing the Registry via Memory Analysis
- The Windows Registry in Memory
- Enumerating Registry Hive Structures
- Volatile and Stable Keys
- Registry Analysis Plugins
- Malware Persistence Mechanisms
- Enumerating Services
- Analyzing the Shimcache for Evidence of Execution
- Extracting Password Hashes from Memory Dumps
User Artifacts in Memory
- Evidence of Directory Traversal with Shellbags
- Extracting Clipboard Contents
- Evidence of Execution with Userassist
- Examining Command Prompt Use
- Parsing the Master Boot Record from Memory
- Parsing the MFT from Memory
- Creating Activity Timelines from Memory
FOR526.4: Internal Memory Structures
Section four focuses on introducing internal memory structures such as drivers, Windows memory table structures, and extraction techniques for portable executables. As we come to the final steps in our investigative methodology - steps that include spotting rootkit behaviors and extracting suspicious binaries - it is important to emphasize again the rootkit paradox, which is that the more malicious code attempts to hide itself, the more abnormal and seemingly suspicious it appears. We will use this concept to evaluate some of the most common structures in Windows memory for hooking, IDTs, and SSDTs.
Once we have deemed something suspicious, it warrants further detailed analysis. Extraction techniques for portable executable (PE) files have already been introduced for drivers (moddump) and dlls (dlldump). In this section, we introduce two methods for extracting an executable. Both of them make use of the PE header in order to reconstruct the extract PE file as close as it can be to that of the original on-disk file. Obstacles such as PE corruption are discussed here along with some advanced work-around techniques, including dumping memory sections via volshell.
The final focus in section four is on sources of memory captures other than a real-time acquisition. Sometimes investigators' luck runs out and they do not complete a memory acquisition before the target system is taken offline or shut down. In these cases, where else can system memory captures be found? Hibernation files and Windows Crash Dump files can be valuable sources of information, regardless of whether you find yourself without a current memory capture. This section covers the structure of the hibernation and Crash Dump file and how to convert both into raw memory images that can easily be parsed using Volatility and other tools in our memory forensics weapons arsenal. In addition, we will analyze a Crash Dump file, and in so doing discover just how Windows responds and what information is captured when a system crashes.
- Advanced Memory Analysis of a Rootkit
- Detecting Code Injection with Advanced Volatility Plugins
- Binary and Packed Binary Extraction with Fuzzy Hash Matching
- Analyzing a Crash Dump File with Windbg
Interrupt Descriptor Tables
- Interrupts and Exceptions
- Structured Exception Handling
- Hooking and Inline Hooking of the IDT
System Service Descriptor Tables
- SSDT Kernel API Entries
- Hooking the SSDTs
- SSDT Validation
- Finding Hooked APIs
- Driver Stacking
- Walking the List of Loaded Drivers
- Scanning for Modules/Drivers in Memory
Direct Kernel Object Manipulation
- Unlinking from the Active Process List
- Fuzzing and Data Sanity Checks
- Using Sessions to Find Hidden Processes
- Tracking Windows Stations for Subversion
Module Extraction
- The Module Loading Process
- Extracting a Portable Executable
- Special Case Exceptions for Packed Binaries
- MemD5s of Extracted Modules vs. MD5s
- Corrupt PE Headers
Hibernation Files
- Saved System State
- Power Saving Feature
- Serialized Memory Image
- File Format
- Potential Vulnerability to Malware
- Decompression and Use
Crash Dump Files
- Debugging Information
- File Format
- Reconstruction and Use
FOR526.5: Memory Analysis on Platforms Other than Windows
Windows systems may be the most prevalent platform encountered by forensic examiners today, but most enterprises are not homogeneous. Forensic examiners and incident responders are best served by having the skills to analyze the memory of multiple platforms, including Linux and Mac - that is, platforms other than Windows.
This section starts with a deep dive on Linux memory acquisition and analysis, using the Rekall memory analysis framework. Linux memory analysis has posed serious challenges to investigators in the past, requiring labor-intensive construction of an analysis profile that matches the Linux target system for use with memory analysis tools. Rekall offers the ability to analyze Linux memory images with greater ease, since the profile of the system is recorded in the memory image itself upon acquisition. Students will be introduced to Linux kernel data structures and how to enumerate processes, process mapped memory, and open files and network connections.
Later in the section we cover the collection and analysis of Mac OSX memory. In a 2014 survey, 45 percent of companies reported that they now offer their employees the choice to use a Mac. Mac systems are clearly becoming more common across all environments, including business, academia, and personal use. Subsequently, investigators can expect to find, if they have not already, a Mac system as the subject of a future investigation. In this section, we discuss Mac memory acquisition, making use of a variety of third-party tools such as Rekall's pmem, Mac Memoryze, and Mac Memory Reader. We will use open-source memory analysis frameworks to analyze Mac memory images to recover processes, memory maps, open files, loaded modules, and network connections.
- Acquiring Linux System Memory with Rekall's pmem
- Analysis of Linux System Memory and Malware Identification
- Using OSXPmem to Acquire Mac Memory
- Rogue Insider Mac Investigation
Linux Memory Acquisition and Analysis
- Acquiring Memory Using Third-Party Tools
- Linux Virtual Memory Management System
- Linux Kernel Data Structures
- Process Enumeration - Walking the Task_struct List
Mac Memory Acquisition and Analysis
- Memory Acquisition Using Third-Party Tools
- Overview of Mac Memory Structures
- Process Enumeration - Walking the All-proc List
- Dumping Process Memory Maps
- Network Connections, Routing Cache, ARP Cache Extraction
- Rootkit Detection
FOR526.6: Memory Analysis Challenges
This final section provides students with a direct memory forensics challenge that makes use of the SANS NetWars Tournament platform. Your memory analysis skills are put to the test with a variety of hands-on scenarios involving hibernation files, Crash Dump files, and raw memory images, reinforcing techniques covered in the first five sections of the course. These challenges strengthen the student's ability to respond to typical and atypical memory forensics challenges in all types of cases, from investigating the user to isolating the malware. By applying the techniques learned throughout in the course, students consolidate their knowledge and can shore up skill areas where they feel they need additional practice.
- Malware and Rootkit Behavior Detection
- Persistence Mechanism Identification
- Code Injection Analysis
- User Activity Reconstruction
- Linux Memory Image Parsing
- Mac OSX Memory Image Parsing
- Windows Hibernation File Conversion and Analysis
- Windows Crash Dump Analysis (Using Windows Debugger)
The students who score the highest on the multi-platform memory forensics challenge will be awarded the coveted SANS Digital Forensics Lethal Forensicator Coin. Game on!
Additional Information
Lab Requirements
A properly configured system is required to fully participate in this course. These requirements are the mandatory minimums. If you do not carefully read and follow these instructions, you will likely leave the class unsatisfied because you will not be able to participate in hands-on exercises that are essential to this course. Therefore, we strongly urge you to arrive with a system meeting all the requirements specified for the course.
This is common sense, but we will say it anyway. Back up your system before class. Better yet, do not have any sensitive data stored on the system. SANS can't responsible for your system or data.
- CPU: 64-bit Intel i5/i7 (4th generation+) - x64 bit 2.0+ GHz processor or more recent processor is mandatory for this class (Important - Please Read: a 64-bit system processor is mandatory)
- It is critical that your CPU and operating system support 64-bit so that our 64-bit guest virtual machine will run on your laptop. VMware provides a free tool for Windows that will detect whether or not your host supports 64-bit guest virtual machines. For further troubleshooting, this article also provides good instructions for Windows users to determine more about the CPU and OS capabilities. For Macs, please use this support page from Apple to determine 64-bit capability.
- BIOS settings must be set to enable virtualization technology, such as "Intel-VT".
- Be absolutely certain you can access your BIOS if it is password protected, in case changes are necessary. Test it!
- 16 GB (Gigabytes) of RAM or higher is mandatory for this class (Important - Please Read: 16 GB of RAM or higher of RAM is mandatory and minimum.
- USB 3.0 Type-A port is required. At least one open and working USB 3.0 Type-A port is required. (A Type-C to Type-A adapter may be necessary for newer laptops.) (Note: Some endpoint protection software prevents the use of USB devices - test your system with a USB drive before class to ensure you can load the course data.)
- 200 Gigabytes of Free Space on your System Hard Drive - Free Space on Hard Drive is critical to host the VMs we distribute
- Local Administrator Access is required. This is absolutely required. Don't let your IT team tell you otherwise. If your company will not permit this access for the duration of the course, then you should make arrangements to bring a different laptop.
- Wireless 802.11 Capability
- Host Operating System: Your system must be running either Windows 10 Pro or macOS 10.12 or later that also can install and run VMware virtualization products (VMware Workstation 15.5, VMware Fusion 11.5, or VMware Player 15.5). Or,
- Please note: It is necessary to fully update your host operating system prior to the class to ensure you have the right drivers and patches installed to utilize the latest USB 3.0 devices.
- Download and install VMware Workstation 15.5, VMware Fusion 11.5, or VMware Player 15.5 or higher versions on your system prior to class beginning. If you do not own a licensed copy of VMware Workstation or Fusion, you can download a free 30-day trial copy from VMware. VMware will send you a time-limited serial number if you register for the trial at their website.
- Download and install 7Zip (for Windows Hosts) or Keka (macOS).
If you have additional questions about the laptop specifications, please contact firstname.lastname@example.com.
Who Should Attend
- Incident Response Team Members who regularly respond to complex security incidents/intrusions and would like to know how memory forensics will expand their reach.
- Experienced Digital Forensic Analysts who want to consolidate and expand their understanding of memory forensics.
- Red Team Members, Penetration Testers, and Exploit Developers who want to learn how their opponents can identify their actions. Discover how common mistakes can compromise operations on remote systems, and how to avoid them. This course covers remote system forensics and data collection techniques that can be easily integrated into post-exploit operating procedures and exploit testing batteries.
- Law enforcement officers, federal agents, or detectives who want to become a deep subject-matter expert on memory forensics.
- SANS FOR508 and SEC504 Graduates looking to take their memory forensics skills to the next level.
- Forensics Investigators working in organizations where memory is regularly obtained by first responders, and who want to raise the bar by analyzing the images.
Students will benefit from having some experience with Windows forensics, either by attending FOR408 or through forensic casework or incident investigations.
What You Will Receive
- This course extensively uses the SIFT Workstation 3 to teach incident responders and forensic analysts how to respond to and investigate sophisticated attacks. SIFT contains hundreds of free and open-source tools, easily matching any modern forensic and incident response commercial tool suite.
- Ubuntu LTS Base
- 64-bit based system
- Better memory utilization
- Auto-DFIR package update and customizations
- Latest forensic tools and techniques
- VMware Appliance ready to tackle forensics
- Cross-compatibility between Linux and Windows
- Expanded Filesystem Support (NTFS, HFS, EXFAT, and more)
Windows 8.1 Workstation with license
- 64-bit based system
- A licensed virtual machine loaded with the latest forensic tools
- VMware Appliance ready to tackle forensics
Downloadable Course package containing:
- Memory captures, SIFT workstation 3, tools, and documentation
SANS Memory Forensics Downlaodable Exercise Workbook
- Electronic Exercise book is over 200 pages long with detailed step-by-step instructions and examples to help you become a master incident responder
SANS DFIR Cheat sheets to Help Use the Tools
MP3 audio files of the complete course lecture
Press & Reviews
"Very valuable for what my group is doing at JPL. With the acquisition of MIR and acquiring RAM in first response, this is exactly the skill set we need to master." - Rick Smith, Jet Propulsion Lab
"I got everything I needed from this course and Alissa [Torres] was a phenomenal instructor!" - Matt Myrick, LLNL
"The presentation, exercises, labs and data provided are the best in the computer forensics industry." - Rebecca Passmore, FBI
"The training opened my eyes for the need to collect memory images, as well as physical images for single computer analysis, such as theft of IP or other employee investigations." - Greg Caouette, Kroll
"Alissa brings memory dumps back to life." - Stephanie Denis, Canadian Police College
"Typically by day three on a SANS course my brain is fried and I'm seriously slowing down. So today when I grabbed Alissa to explain to me VAD Analysis and she walked through it all with me until I understand it. Well, I guess you could say that the type of professionalism and dedication that makes me rate SANS so highly." - Sheldon J.
"The SANS Institute is currently the leader in the commercial IR and computer forensic training market. They have a large number of quality courses." - Luttgens, Jason; Pepe, Matthew; Mandia, Kevin. Incident Response & Computer Forensics, Third Edition - July 2014
Author Statement
Having the skills to conquer memory forensics pushes you into the top tier of forensics professionals out there today. File system forensics is now taught in community colleges, and as a result, new grads with entry level forensics skills are flooding the job market. Experienced professionals now need deeper technical expertise to set themselves apart from the pack. FOR526 class delivers this expertise. We have written this class with the specific goals of creating experts by making a specialist out of a generalist. My co-authors and I, forensics practitioners ourselves, understand the types of cases and challenges examiners are up against today. As firm believers in 'exposure therapy,' we provide our students with the tools to get the job done and then throw them right into some of the most complex yet exceedingly more common memory forensics scenarios.
- Alissa Torres
As one of the authors of the only publicly available memory anti-forensics toolkit (ADD), I understand the unique challenges of investigating memory. I've been involved with memory forensics since my days working with HBGary before open-source memory tools were viable for real forensic investigations. Just a few years ago, memory forensics was a highly specialized skill that few in an organization needed. Today, if you want to be considered for a top-tier position in DFIR, you must understand how to perform memory analysis, and that goes well beyond just running a tool. You must also be able to analyze and understand the evidence. I use memory forensics in practically every case I investigate, whether it involves the page file, hibernation files, crash dumps, or evidence stored in volume shadow copies. Many of the labs you'll perform in FOR526 were inspired by my real-world investigations in which memory forensics saved the day. Memory offers a very dense and target-rich search space for evidence of value. Memory-only malware? Malicious insiders using private browsing to eliminate disk evidence? Anti-forensics techniques? They all get stuck in memory. I often like to heckle my more traditional counterparts by telling them 'I'm done with my analysis before you've even finished imaging the drive.'
- Jake Williams
Additional Resources
Take your learning beyond the classroom. Explore our site network for additional resources related to this course's subject matter.


text:
Agency ŪPAS
Key Details
- Region
- The Baltic States
- Key contacts
- Darius Lomsargis, Dace Stīpniece, Tiina-Katrina Kaber
- Website
- www.upas.lt
- Catalyst Website
- www.catalystteambuilding.lv
With an exclusive licence for all three Baltic countries, Agency ŪPAS offer Catalyst teambuilding activities in Lithuania, Latvia and Estonia.
Agency ŪPAS is a live communication company providing services in Baltic States. We help companies to engage their employees and strengthen loyalty of their clients through live communication campaigns, also to provide the highest value to their brands and products.
Our agency has been advising and helping well-known brands since 2008. With experience of over 800 different events we are among the best companies in our market. We are proud of our partnership with Catalyst Global, of feedback we receive from clients, and the recognition we get from our professional partners.
Combination of gamification and functional business consulting, corporate events, product launches, conferences, interactive business simulations, team buildings, training programs, workshops, social responsibility projects are the most effective tools of internal and external communication. We believe that it is an essential part of each company and we provide an equal partnership for our clients.
For incentives and teambuilding events please contact us:

subset: commoncrawl


text:
Walter Bright's Bio
Walter Bright is a computer programmer known for being the designer of the D programming language. He was also the main developer of the first native C++ compiler, Zortech C++ (later to become Symantec C++, now Digital Mars C++). Before the C++ compiler he developed the Datalight C compiler, also sold as Zorland C and later Zortech C.
- The X Macro
- Constrained Templates
- Improving Compiler Error Messages
- Flying to England on a Rocket
- My Music Collection Used To Be Cool
- Implementing Thread Local Storage on OS X
- C's Biggest Mistake
- Assembler to C
- Designing Safe Software Systems Part 2
- Safe Systems from Unreliable Parts
- How Nested Functions Work, part 2
- How Nested Functions Work, part 1
- In A Module Far, Far Away Part 2
- In A Module Far, Far Away Part 1
- Compiling Templates
- One Million Years B.C.
- It's Not Always Nice To Share
- Porting D to FreeBSD
- Multithreaded I/O
- Signaling NaNs Rise Again
- Porting D to the Mac: Epilog
- Porting D to the Mac Pt. 3
- Porting D to the Mac Pt. 2
- Porting D to the Mac
- Should Out-of-Memory Default to Being a Non-Recoverable Error?


text:
Join Cousin +Russ Worthington and Ol' Myrt here at the 2014 RootsTech conference February 6-8 at the Salt Palace Convention Center in Salt Lake City, Utah. They are expecting 10,000+ to attend in person and 100,000 to attend virtually. So how on earth will genealogy bloggers recognize each other amid the throng?
Proudly wear your Genealogy Blogger Beads, that's how! How do you get them? Just let Ol' Myrt know you will be attending! Join the Facebook Group - Genealogy Bloggers at RootsTech 2014 to find links for the signup sheet.
This year +Thomas MacEntee will be away as a featured speaker on a genealogy cruise, so get your gorgeous, funky, thrilling, marvelous purple genealogy blogger beads from DearMYRTLE.
You'll recognize Ol' Myrt here in the media center of the exhibit hall, as I'll be wearing my purple feather boa. I'll also be up in the front row in the minutes before the opening session, serving as an "Official RootsTech 2014 Blogger". Join this Facebook Group for more info: Genealogy Bloggers at RootsTech 2014.
Happy family tree climbing!
Myrt :)
Your friend in genealogy.
Blog: http://blog.DearMYRTLE.com
Facebook: http://www.facebook.com/DearMYRTLE
G+ DearMYRTLE Community
Twitter: @DearMYRTLE
Second Life: Clarise Beaumont


text:
Fuel consumption and CO2 emission values shown are calculated using the combined driving cycle (applicable legislation).
At Toyota, we're committed to making ever better cars. Corolla is built on Toyota's advanced new TNGA engineering platform, delivering a truly satisfying drive. A more rigid body and low centre of gravity come together to reduce body roll when cornering, while the double wishbone suspension absorbs shocks more effectively, for a smoother ride.
The first thing you notice about the new Corolla is its bold and dynamic exterior. An attractive low bonnet gives it a sleek, dynamic profile, which is enhanced by sporty 18" alloy wheels.
Our designers have chosen a combination of high quality materials that look stunning together throughout the spacious interior. And you gets lots of space with a front to rear seat distance of 928 mm for a spacious rear seat space, and a generous, 598 litre boot with a number of storage aids for greater practicality and convenience.
Stylish, efficient and a joy to drive, the new Corolla Touring Sports has the space you need with a wheelbase of 2700 mm and a best-in-class rear seat passenger legroom. Experience the segment's only hybrid Touring Sports (wagon/estate). The 1.8 litre self-charging Hybrid engine provides a relaxed and spirited drive. Whether you're driving in the city or cruising along the motorway, you'll benefit from the self-charging hybrid powertrain, plus the reliability for which Toyota is renowned.
Spirited and responsive in the city, the 1.8 litre self-charging Hybrid engine provides a relaxed drive.Book a Test Drive now
The cabin of the new Corolla has been designed around your comfort. Steering-wheel mounted switches for driving, infotainment and audio controls let you keep your hands in one place.Explore Grades & Features
The new Corolla Touring Sports gives you the space you need. It makes the rear passengers just as comfortable as the people in the front. Its generous boot space will fit everything in thanks to an adjustable deck board and easily folded rear seats.Build your Corolla Touring Sports
Toyota Safety Sense is standard across every Corolla, because your safety is essential. This unique safety system includes an array of updated safety features that makes driving easier, while keeping you and your passengers even safer.Explore safety features
Levene, Dublin "I'm driving my three children to school every morning, knowing I'm making a difference to their future. And I only have to fill the car every 5 or 6 weeks. Hybrid is definitely the way to go."
Ross, Tipperary "To switch from Diesel to Hybrid was an easy decision. The cost savings of the fuel, the insurance and the car tax – for someone with a young family, that makes a huge difference."
World Premiere of the Legendary SupraThe world premiere of the new Toyota GR Supra at the 2019 North American International Auto Show
Toyota to share its innovative Toyota Guardian safety technology Toyota pledges to make available its new innovative Guardian safety technology to all manufacturers


text:
I posted this in another place and I don't think I hit the right place.
After the devastating tornadoes in Oklahoma which killed many people including children, one of the statements made by someone being interviewed was that the lord giveth and the lord taketh away.
How could anyone want to believe in such a monster?
What is the group's take on such statements as this?
Views: 1234
Just what exactly are you praying for? Is it to reverse time and get all to safety? Is it for the tornado to go away and not cause destruction. If your prayers are for the survivors they have already received their reward by not being killed.
To repeat, exactly what are you praying for?
"My thoughts and prayers to those families" -Reverend Bob
Making a donation to the American Red Cross would accomplish so much more. The intangible nature of thoughts & prayers do little for those standing before a heap of rubble.
We should of course do good works. I remember being down with the ARC medical relief teams after Katrina. People do need material support, most definitely.
Almost more than that, though, they need spiritual support. Particularly for long-term recovery.
Psychological support? Absolutely! Spiritual support is like giving support hose to a double amputee.
Pithy, but a bit worn and trite, don't you think?
Have you ever been to a friend's wedding who wasn't an atheist? A Jewish or Christian wedding, just because they were believers? A funeral? Was that support hose for a double amputee?
Or was it instead an expression of human solidarity? Psychological support for you, spiritual support for them, whatever. Acts of kindness and empathy which strengthened your connection to others and thereby modified your likely behaviors in the future.
Yes, well, I'm just full of pith, but I still don't accept your "spiritual" premise, you can't support a nonexistent entity. I maintain it's psychological support when I attend a friend's wedding, regardless of religious affiliation or lack of it - mostly to keep him from running.
You've commented regularly on our thoughts and beliefs, but when I asked you what you believed (you've been relatively good at telling us what you DON'T believe), you seem to have side-stepped the question.
I think that there's a good possibility that you feel religion is a uniting force - whether valid or not - and as such, has social value. Otherwise, we are just a bunch of individuals out there, disunited, wandering around without a purpose, or at least without a purpose in common, and I suppose, to an extent, you would be right.
You would also be right to say that throughout history, religion, whichever one it was, has had a uniting influence on society in general. But we have outgrown religion now - if we're going to make it into the centuries ahead, we will have to find a new purpose, a new uniting force, and as much as a child may miss the days of blind faith in Santa at Christmas, we may well miss the bliss that was ignorance of how the world really works. Science kinda takes the magic away, but not necessarily the wonder.
I see Humankind entering it's teen-age years. We are a bit up in the air as to what we want to do for the next million years or so, but, like most teenagers, we'll figure it out. Or we won't, and we'll devastate the planet and destroy ourselves, but either way, we'll ultimately do it without religion.
Religion only tends to unite those who share the same beliefs, and who express them in the same way. It is at least equally divisive, and continues to be the cause of many of the most despicable acts of war, violence and cruelty. We see this on a daily basis, and it shows no sign of ever changing.
if we're going to make it into the centuries ahead, we will have to find a new purpose, a new uniting force
What would you suggest?
Civil/constitutional law? Nationalism? Hyper-adherence to political parties? Baseball? Celebrity worship?
It seems to me that you're willing to discard what to date has been the most successful theory, without having any better theory to replace it. That would be remarkably poor science.
Dare I suggest that our common uniting force is hard-wired into our survival instinct? Just as wild animals will often unite when threatened by predators to protect their young and so guarantee the continuity of the species, humans will work together in adversity, or in a quest for a common purpose to do the same, or to improve our lot.
Granted, this isn't always true, politics, greed and stupidity notwithstanding, but it's true most of the time. Why would people strive to rescue victims of natural disasters, for example?
This has nothing to do with any external force, such as a deity. It's humanity. Let's take some credit for what's good about our species, rather than thanking a non-existent god.
The common uniting force wired into our survival instinct by virtue of natural selection is one for continuation of genetic material. That's protection of family and perhaps of tribe, but not more than that.
What you are perceiving as good people working together, seeing other people with different genetic material as being worthy of help and protection, that is the result of thousands of years of cultural development driven largely by religious ideas.
It's an open question whether that culture can be continued in the absence of those religious ideas. That may or may not be possible. As we see in the world, the pressures toward competing tribalism are really quite strong.
"seeing other people with different genetic material as being worthy of help and protection, that is the result of thousands of years of cultural development driven largely by religious ideas."
Would that include the thousand-year period known as the Dark Ages, during which time anyone with ideas different from those of the Church were killed - I can see how that outlook might foster the idea of "seeing other people with different genetic material as being worthy of help and protection" - as people help protect their fellow man from Mother Church.


text:
"I realized that repairing the ravages of time was not nearly as satisfying as being able to help put patients on track to optimum health," Brill recalls, "so pediatrics was the obvious choice." In fact, Brill was named Pediatric Dentist of the Year by the AAPD in 2009.
You have been involved with the academy for 20 years. In that time, which AAPD accomplishments really stand out?
Many, but the top five are that our reference manual is acknowledged as setting the standard for pediatric care; the doubling of pediatric dental residency positions over the last 20 years; our success in public education; recognition of the importance of establishing a dental home; and, most importantly, our leadership in removing access-to-care barriers for all children — especially the disadvantaged.
Mentor Magazine asked Brill what keeps him awake at night. Here is what he had to say:
I see many children with severe early childhood caries who suffer from constant pain, chronic infections and a reduced quality of life. I worry that if caregivers don't establish good health habits in children — and we can't provide adequate access to care — that our kids will not enjoy good health. The goal of a cavity-free childhood resulting in optimum growth and development must be more than just a dream.
The article was included in its November 2013 issue. To continue reading the piece in its entirety, visithttp://mentorissalespower.com/archives/1113/departments/42_CLOSING_PITCH.html
Back to News


text:
Item #0127
10-21 days. This beautiful, texture-filled European salad blend is easy to grow, and scrumptious to eat! Good container mix. Varieties include: Lettuces: Tango 10%, Royal Oak Leaf 10%, Red Salad Bowl 25%, Red Sails 5%, Black Seeded Simpson 10%, Grand Rapids TBR 10% Greens: Arugula 20%, green endive 5%, Mizuna mustard greens 5%.
This packet sows four 9-foot rows.
Seedling Image
Days to Emerge:
Seed Depth:
Seed Spacing:
Row Spacing:
When to sow outside: RECOMMENDED. 2 to 4 weeks before average last frost, and when soil temperature is 60°-70°F. Successive Sowings: Every 3 weeks until 2 weeks before the first fall frost. If using winter row covers, you can extend your season 2 to 4 weeks after first fall frost. In USDA zone 8 or warmer, also sow in fall for winter harvest. In summer's heat, grow in the afternoon shade of other crops.
When to start inside: Any time for fresh mesclun year-round! Grow on a sunny windowsill or under grow lights.
Harvesting: Harvest individual leaves at 2" - 4" tall for a continual supply. If you wish to harvest as heads, cut off at 2" above ground level as soon as possible after head forms; new leaves will grow from the center. The earlier the harvest, the more tender the crop.
Artist: Donna Clement
Item #0127
1.50 grams
What is Soil?
Soil is a diverse mix of substances, teeming with life and composed of minerals, decayed plant and animal matter, water, and air. It…More…
In early fall, it pays to keep an eye on nighttime temperatures so that you get your frost-sensitive crops harvested before the first frost.


text:
by Rachael
Matador, Bull, & Flamenco Dancer Costume Photo 9 of 9
Rate this costume:
13 votes
|10 comments · add a comment
|Costume type:
|Costumes for Kids
This homemade costume for kids entered our 2015 Halloween Costume Contest.
A word from Lindsay, the 'Matador, Bull, & Flamenco Dancer' costume creator:
Costumes I made for my three kids. The inspiration came from a pair of castanets we received from grandparents who went to Spain. Bull: Used a pattern for an animal costume and some trial and error... Read more »
Similar costumes:


text:
Associated Press Digs Its Own Grave Deeper; Wants To Create Its Own Fair Use Rules
from the that's-not-how-it-works deptOn Friday, the story about the Associated Press threatening a blogger for using short snippets of AP stories with links back to the original as somehow being copyright infringement got a ton of attention. It was a clear case of the AP overstepping its bounds -- which goes against everything the organization claimed it would do. As more and more people complained, the AP figured it needed to do something to respond to the complaints -- though, it's choice of somethings proved rather ill-conceived.
First, it went around to the various blogs that had responded to the AP's actions and posted a cut-and-paste comment on all of them. It's rather amusing that their own response to people cutting and pasting their articles is to cut and paste the identical comment everywhere. Of course, in doing so, that comment didn't actually engage with any of the blogs, and in our case, at least, referenced other blog posts that we had not referenced or even read. In other words, the AP reacted as if these various blogs were all working together as a single organization. We're not. Even worse, this comment included what amounted to a sales pitch, suggesting that bloggers should "license" AP content.
Second, the AP announced that it would "rethink" its policies about blogging and try to set guidelines for what is and what is not fair use quoting of its articles. Unfortunately for the Associated Press, that is not how copyright law works. The holder of the copyright does not get to decide what is fair use. That, after all, is the whole point of fair use -- that it doesn't involve the copyright holder in the first place.
Third, the AP chose not to stop demanding that the Drudge Retort take down the various blog posts it had sent DMCA notices over. In other words, despite this "rethinking" it's still pursuing the same brain-dead, internet-unfriendly policy. Clearly, no one over at the Associated Press realizes how badly they screwed this one up.
So, again, we'll reiterate what we said on Friday: on any AP story we find that is worthy of a post, we'll now actively search for alternative sources to receive the link. We won't totally rule out linking to the AP, but since it seems so against getting traffic from other sites, it will now be a link of last resort. It makes you wonder if the news organizations who license AP content (the ones who are the actual beneficiaries of these links) are going to start telling the AP to knock it off.
Filed Under: associated press, bloggers, fair use
Companies: associated press


text:
Google Agreement Sets a Bad Precedent of Special Treatment, Says FTC Commissioner
The U.S. Federal Trade Commission's search settlement with Google today "creates very bad precedent and may lead to the impression that well-heeled firms such as Google will receive special treatment at the Commission," wrote Commissioner J. Thomas Rosch in a dissenting statement.
That's both because he doesn't think Google violated antitrust laws and because he doesn't think the non-binding search agreement Google made has any teeth.
Rosch's pithy take: "In other words, after promising an elephant more than a year ago, the Commission instead has brought forth a couple of mice."
Rosch, a Republican who is known as a bit of a lone-wolf thinker, is on his second-to-last day at the agency, as his replacement was confirmed earlier this week.
Rosch voted along with the rest of the five commissioners to close their search investigation and with the majority to discipline Google on standards-essential patents. But he abstained from voting for Google's voluntary settlement agreement and a statement on the patent matter.
By stretching to catch Google on something — anything — the FTC reached too far, Rosch argued. The two issues the FTC convinced Google to back down on are scraping content to display in search "snippets" and allowing AdWords users to manage their ad campaigns across multiple platforms.
But scraping could quite easily be seen as an issue of fair use. The search agreement puts "the FTC in the position of becoming the enforcer of the copyright laws on the Internet — a task for which it has neither the resources nor expertise, and was surely not envisioned by Congress," Rosch said.
He elaborated:
As any casual user of the Internet knows, many websites make use of other websites' content; indeed, the business model for many popular websites is based on aggregating or summarizing the content of other websites. As a result of the majority's apparent condemnation of scraping, the legality of these aggregators may be called into question, and the Commission may be inundated with rent-seeking complaints from firms like the alleged "victims" here.
Rosch had previously expressed skepticism about Google's competitors trying to get the FTC to fight their battles. He told Bloomberg, "They can darn well bring it as a private antitrust action if they think their ox is being gored instead of free-riding on the government to achieve the same result."


text:
Dennis Rodman On LeBron: "In the 80's or 90's, he'd be average."
In just over three months, Dennis Rodman was the highest-profile American to ever have an audience with North Korea's political hierarchy, then returned to the states and finished in ninth place on Celebrity Apprentice.
HoopsVibe Very Quick Call: Dennis Rodman gets around.
Read More


text:
>Behind the Scenes>2007 Statistics
Run to Win25 Marathons, 17 Ultras, 16 States (Full List)
I ran a mile and I liked it, liked it, liked it. email@example.com
Another Passion
Rick "The will to win means nothing without the will to prepare." - Juma Ikangaa "I wanna go fast." Ricky Bobbyrunningforcassy.blogspot.com
Anyone have pizza?
AlexBlogrunner's Road To New York - Daily Nonsense Delivered Fresh To Your MonitorGroupsNYC Road Runners | 1500 Mile | Half-Marathoners
still alive
Greg in ND
One day at a time.
Perhaps it has been mentioned elsewhere and I missed it, but how many members of RA as of 12/31/07?
If you had any doubts about the popularity of your site, Eric, you don't have to worry anymore...
How do these compare to 2006?
Young Gun
Hi Dave,
It is my policy not to advertise operational data. It is probably safer for the site itself that these numbers are not shared.


text:
Tuesday, March 13, 2012
Posted by Rot at 7:32 AM
Labels: book, ghosts, grim reaper, illustration, retro, vintage
2 comments:
- crudedoodle.com said...
Man, this is the kind of artwork that added so much to Halloween when we were kids. And it was always so rare.
- March 13, 2012 at 8:51 AM
- Joel said...
Reminds me of a little worn paperback from the 60s my grandmother gave me when I was a kid. It was called "Spook", and it was about a little black dog who was forced to be the familiar of a cruel witch with a cat allergy.
It had a lot of wonderful little Halloween illustrations, all hand-drawn by the author, I think. For a couple years, I read that book (well, asked to have it read to me) year-round.
- March 13, 2012 at 12:44 PM
Subscribe to: Post Comments (Atom)


text:
Animation Preview
This asset suitable for Game developer, the best assets for action game or side-scrolling games. You can edit or modify because this made 100% Vector
What You will get :
- Assets in Adobe Illustrator CS formats (Ai).
- Assets in Encapsulated PostScript format (EPS).
- Assets in Transparent Portable Network Graphics (PNG).
- Assets in Spriter (SCML).
Features :
- This assets compatible with AI (Adobe Ilustrator)
- This assets easy to edit and change color
- This assets easy to edit and change color
- Files Included: Ai, Eps, Png, Spriter
If you have questions, suggestion, feedback or need any helps, please contact me anytime. Please don't forget to rate, I really really appreciate it. Thank you very much.
AI & EPS contain each of body part, there is no included Sprite, all sprite done with SPRITER.


text:
- Duration of movie : 143
- Societies of production : Metro-Goldwyn-Mayer
- Tagline : Think on your sins.
- Movie Genre : Action, Adventure, Thriller,
- Film Note : -movie_rating-
- Original title : Skyfall
- Release Date of film : 2012-11-10
- Status : Released
- Youtube Id : -youtube_id-
- Average rate : 6.5
- Languages spoken : English
- Vote Count : 3789
- Daniel Craig Character (James Bond)
- Judi Dench Character (M)
- Javier Bardem Character (Silva)
- Ralph Fiennes Character (Gareth Mallory / M)
- Naomie Harris Character (Eve)
- Brnice Marlohe Character (Svrine)
- Albert Finney Character (Kincade)
- Ben Whishaw Character (Q)
- Rory Kinnear Character (Bill Tanner)
- Ola Rapace Character (Patrice)
- Helen McCrory Character (Clair Dowar)
- Nicholas Woodeson Character (Doctor Hall)
- Bill Buckhurst Character (Ronson)
- Elize du Toit Character (Vanessa)
- Ian Bonar Character (MI6 Technician)
Skyfall Synopsis:
You can watch Skyfall Movie Online Streaming in HD Now. Watch for free download Skyfall movie online with single fill out the form by clicking on the image of the sign up button. Enjoy all the albums new movie with all Faves Movie Streaming In ! Just watched it Skyfall Free Movie Online. This is truly spectacular and could one of those rare amazing. The quality was great all around. Management, images and visual effects were all very innovative and brilliant. The pleasure of the script, often humorous and has a lot of heart for all his characters are all very well developed.
... Skyfall 1080p ...
Debbie McWilliams Job as : Casting, Jany Temime Job as : Costume Design, Barbara Broccoli Job as : Producer, Michael G. Wilson Job as : Producer, Sam Mendes Job as : Director, John Logan Job as : Writer, Roger Deakins Job as : Cinematography, Callum McDougall Job as : Executive Producer, Robert Wade Job as : Writer, Neal Purvis Job as : Writer, Adele Job as : Songs, Paul Epworth Job as : Songs, Thomas Newman Job as : Original Music Composer, Dennis Gassner Job as : Production Design, Neal Callow Job as : Art Direction, Dean Clegg Job as : Art Direction, James Foster Job as : Art Direction, Marc Holmes Job as : Art Direction, Paul Inglis Job as : Art Direction, Jason Knox-Johnston Job as : Art Direction, Anna Pinnock Job as : Set Decoration,
Yes, now you can Watch Skyfall Full Movie Streaming Online and get the link to Skyfall Full Movie Online Streaming In HD Ici


text:
Highlights EX-Z350
For unforgettable moments
12.1 megapixels
The EX-Z350 conceals a high performance of 12.1 megapixels in its slim design case. The CCD chip with 12.1 megapixels does not only allow you to take brilliant photos, but also edit, enlarge and print out sections of a photo - in outstanding quality and with no loss of image detail.
27 mm wide-angle lens with 4x optical zoom
The combination of the 27 mm wide-angle* design and 4x optical zoom makes the EX-Z350 the perfect companion for every occasion - you...
6.9-cm (2.7-inch) TFT colour display
The large 6.9 cm (2.7 inch) TFT colour display completes the design of the EX-Z350. It takes up the entire reverse of the camera, ensuring an...
Face detection function
Whether you're on holiday, at a party or spending time with your family - people are particularly popular subjects for a photo. It's always a pity when...
Easy mode
In the EX-Z350 Easy Mode, you can take outstanding photos in any situation...


text:
Is there something in the Evian?
Christina Aguilera and her hubby of about five years are latest celebrity couple to land in splitsville.
The 29-year-old "What a Girl Wants" pop star confirmed Tuesday she'd separated from Jordan Bratman, 33, hours after rumors of the couple's split exploded online.
U.S. & World
"Although Jordan and I are separated, our commitment to our [2-year-old] son Max remains as strong as ever," Aguilera told People in a statement.
Bratman, a music marketing exec, began dating Aguilera in 2002, according to E! Online.
The couple wed in November 2005 at a Napa Valley, Calif. estate. Their son Max was born in January 2008.
News of their breakup comes on the heels of such high profile splits as David Arquette and Courteney Cox; and Laura Dern and Ben Harper.


text:
Miss Lola Claire Fransisca Merritt
6 pounds, 13 ounces
19 1/2 inches long
Lola Claire because we love it
and Fransisca, after my amazing and wonderful Grandma Franzi
(Franziska--German name and spelling. We updated it a bit, and....
....there's only one Franzi, so we didn't copy the name exactly)
We are so thrilled she is here and are enjoying her immensely.
I'll post more pictures as I am able--thank you all so much for your prayers for our family throughout this entire pregnancy! God has heard and answered. Our little girl is here and safe, and we already love her so very much!


text:
Sign up for news and offers!
Get the latest from The Diabetes Site in your inbox every morning!
Visit The Diabetes Site
to fund research.
It's FREE!
to fund research.
It's FREE!
The Diabetes Site's goal is to give people a resource to help educate themselves as well as spread awareness of this disease to the community. It also is a great sounding board to connect with others and share experiences, knowledge, and support.
Visitors to The Diabetes Site can click on the "Click Here to Give – it's FREE" button to fund diabetes research.
100% of sponsor advertising fees goes to our charitable partners.


text:
Haven't found anything yet?
High quality mural Monster Inc.
You get pure realism with the high quality wallpapers in polymer ink and with photo-realistic motifs. The mural consists of 1 track which you can easily apply on your wall with a very clear installation instruction – no soft time.
Inclusive paste


text:
Mixed week: UVA win overshadowed by scandal
29 comments
Wow, talk about misleading. The implication from the headline is that UVA did something wrong. Shame on you for throwing mud on UVA that was produced by the disgraceful behavior of Joe Paterno and Penn State. Paterno shouldn't be given the honor of retirement -- his butt should be kicked out the door, pronto. But that has nothing to do with UVA.
The writer missed the opportunity to make comparisons between the schools .... Both plagued by sexual assault scandals. The difference here is that the Prosecutors/grand jury in PA had the fortitude to press charges even though many years had passed. Contrast this action with the local prosecutors in our town who allow young women to be raped - and murdered - on the UVA campus and hold no one at UVA responsible. UVA should see the issues at Penn State as their last and final wake up call -- the message to President Sullivan: tighten your stance on sexual assault and abuse and work with the local prosecutors to seek justice against those who commit rape and assault on your campus or risk this kind of publicity down the road.
Poorly written headline, what are you- a novice?
1) What do the topics in this article have to do with one another?
2) Really Pam? Local prosecutors are allowing young women to be raped and murdered without holding what you believe to be the appropriate parties responsible? It's a good thing for you that the "local prosecutors" have more important things to do than go after people who post on message boards for libel.
@Carrboro Pete - Libel.? No, just the facts. How many rapes at UVA are prosecuted? That would be a zero. UVA staff knows they happpen yet keep mum on the topic. That's why everyone is ticked at Paterno.....he kept his mouth shut and kept a predator on his staff.
Joe Pa should have been fired yesterday, if I was at all associated with Penn state I would be ashamed, especially at the gall of these pathetic press events and even the mention of this weekends games. The student support goes to show how out of touch and easily influenced college students are. Sandusky should put a bullet in his head and accept his sure banishment to the deepest of hell.
Boy oh boy, I was waiting for our little town to jump on this. This is--to the tragic kids and families who were impacted by this tragedy--a story of sexual abuse, the loss of innocence, and the loss of faith in adults and institutions. However, it is a story of systems--programs, if you will--and the growth of unchecked power that, even in an institution where the president is a leading researcher in family counseling, causes educated people to act immorally. Power and money corrupt, and these people had absolute power.
You don't think it could happen at UVa? Don't be so naive and myopic to the orange and blue. It does, on a not so publicized scale, all the time. Pam is absolutely correct. While the students in State College who stood outside Paterno's house singing the Alma Mater are misguided, at least the State College community had the testicular fortitude to turn on a legend (and the university's president); enough was enough. Public opinion forced the board to ax Paterno and give the president an ultimatum.
I doubt the local community would have the guts--and morals--to do the same in Charlottesville.
What you are legally required to do and what you must do as a member of our society are two different things for sure. Paterno should have fired himself, because when he found out about this years ago, he FORGOT to fire his marginal defensive coordinator. Strange, as he would have done it to a marginal player.
Where were those who were calling for Paterno's dismissal? NOWHERE!!! The PSU Board of Trustees has real guts- knowing the backlash. They are the first "heros" of this matter by firing Paterno.
Think about this, Paterno put himself and his football program way above his moral obligation to society for, it looks like, a number of years. Sometimes you have to pay for that, just like anyone in the workplace- and it is a workplace, not just a football team or game.
I guess when you are proclaimed king, by idiots (it is just a game), you start to believe that you are above it all, invincible and not responsible to or for anything or anybody.
Any number of people who think the UVa football program suffers because the AD, the University and others stress and require academics and morals above the athletic (primarily the football) program, should reconsider what college athletics is really all about. IT IS SUPPOSED TO BUILD CHARACTER!
Life is plagued by crap like this and when we as a society don't take care of the victims and those who are the cause when something like this occur, then we as a society are doomed................perhaps that has already happened.
Don't ever turn your back on anything like this- be a real person and think about this sad event when you have the choice to be a factor in someone elses life.
Horrid attempt by the writer of this article. Someone at The Hook should allow one of our area's many talented high school student sports writers a crack at the space this current writer's drivel periodically occupies. Unbelievable.
Paterno did what he legally and morally should have done, report the allegations to his superiors. You really don't need 15,000 people hearing a rumor and calling the policedd.
@pam, who at UVa is responsible for rape and murder? Why doesn't the victim report it to the police?
@ Cville Eye -- have you not been around the past 10 years and read the stories in the Hook? Young women report sexual assault but nothing is ever done. Universities are a city unto themselves and rule and govern as they please. When a University official is aware that a sexual assault took place, they should take action. Paterno did what he should have done - he reported it. then he divorced himself from the event,. He had a moral obligation to protect his students - which means he needed to do more than report it. I cannot accept that he kept a pedophile on his staff. Just as I cannot accept a University President knowingly keeping a serial rapist on campus. it doesn't pass the common sense test.
Cville eye- well, you are then part of the problem with our society. There is no difference between any of those who knew what was going on at PSU (even hear-say) and someone who turns up their stereo or closes a window to drown out the cries of a mugging or rape victim.
Perhaps Paterno should have taken that little piece of crap McQueary and marched him down to the police and shown him what should be done.....but no......the football program could not be interrupted by such petty stuff.
Way to go Joe! You may find yourself an accessory to this heinous crime.
The Hook may have written stories about women at UVA being sexually assaulted and the school not doing enough, but when presented with a case where a father allegedly sexually assaulted his own child, the Hook CHOSE to take the father's side and write about the "false allegation" angle. There is a local case of a very prominent man with very powerful friends accused, with much supporting evidence, of molesting his own child. The local prosecutor at the time, the police, the courts, the guardian ad litem ALL chose to believe that the child and the child's mother were lying despite all evidence to the contrary. The hook chose to do nothing to help this child.
I am quite certain that when members of the hook's staff read this comment they will know exactly what case is being referred to here. The list of prominent members of the local community that chose to support a man accused of child molestation is lengthy. When that child becomes an adult and chooses to tell the full story, woe to those that chose to help this man.
Don't even begin to think that Charlottesville is above this kind of cover up. It's already happened, it is continuing, and the hook played its part.
@pam, " When a University official is aware that a sexual assault took place..." He did not know that a sexual assault took place and he could not testify in court that he did. I have been here over 80 years and am very much aware that UVa does not report many crimes to the local police nor rumors of any. For example, it was very resistant to local police investigating students for drug trafficking in the '80s and had to learn otherwise. "...then he divorced himself from the event..." as well he should. He did not have investigative powers and his confronting the accused may have resulted in his giving advance notice and the person may have gone underground. Better to leave it to the professionals.
@HarryD " Cville eye- well, you are then part of the problem with our society. There is no difference between any of those who knew what was going on at PSU (even hear-say)..." Exactly what problem am I a part of? As someone said on another blog, remember Duke's Lacrosse team? What was that problem? The men proved to be innocent, the victim proved to be otherwise. The accused ended up being the victims and scarred. The victim went on to be arrested for something else I believe. How do you know that the guy who said he said molestation occurring in the shower was telling the truth? How do you know that the staff was not accustomed to his making wild or exaggerated statements. How do you know he did not have a grudge against the accused? How do you know he was not under the influence of something? I certainly was not a part of the problem at Duke but your statements leave me to believe that if you had been there you would have been. Where is the morality in telling police something you know absolutely nothing about? Where is the morality in possibly destroying people's lives because you were told something by someone you do not know that well (I believe the accuser was a graduate student at the time of the alleged incident). Paterno did exactly as he should have done and got out of the way. He had no official standing in any investigation. PSU's summarily firing him at this time speaks ill of the leaders at that school and if I were applying for ajob there, I would tell them I have changed my mind.
Other actions committed by Paterno may well have opened the door for many law suits against him and the school if the many turned out to be innocent.
" The hook chose to do nothing to help this child." But "meanwhile...." came out from behind the screen and helped the child I'm sure. Tell us exactly what you did .
Well, finally the typical Charlottesville attitude comes out -- blame the victim. We have laws against molesting children in this country. Yes, innocent until proven guilty is the American way that we tend to forget .... but to keep a known pedophile on staff? C'mon, that's just gross. Cville Eye ... Duke lacrosse case has NOTHING to do with this case.
Pam, You're the one that started out early in this discussion by attempting to link the unrelated. UVA has NOTHING to do with the Penn State case.
"UVA should see the issues at Penn State as their last and final wake up call" Really, you think someone on UVA's staff is responsible for raping someone? If so, who is it?
You think people at the highest levels of the administration are covering for it? That is certainly what you've implied with your later statement "Just as I cannot accept a University President knowingly keeping a serial rapist on campus." Again, who?
I think your own words describe what you're saying pretty well, "it doesn't pass the common sense test."
C-ville eye- your saying that "Paterno did what he legally and morally should have done, report the allegations to his superiors."
That's BS and you know it! He is the "superior"! McQueary, now gone too, thought he was doing his duty to tell the "King of Crappy Valley"............
Well, that grad student hadn't learned a thing about life at PSU. He is a "danger" to society because he is weak and didn't care to get involved any further than he did. He would have been terrific on a battle field- running the other way- wah, wah, wah.............
Good riddance to Paterno, Mc Queary and all the others at PSU who had toal disregard for the victim(s) in this case- placing their lives above others- perfect 'heros" in many a mind.
ok, cookie and cville eye-- check this out: www.uvavictimsofrape.com
I found this site a few years ago when a friend of mine was assaulted on campus and no one wanted to help her. I participated in the Silent Protest. Until then I thought the school would always protect us - but from that day forward I have looked at things differently. Perhaps you have never known anyone who was assaulted, so you may not be aware of the process women are put through. I linked this to Penn State because there is a similarity - when a college staff member turns a blind eye to a crime, it supports all the other responders to turn a blind eye. That's the wake-up call. people are tired of sexual predators - whether they are staff or students - being harbored on our campuses.
So let's say this situation happened here, and the person intervened, even stopped the situation. Pretty brave, considerng the alleged rapist was higher up than him. Let's say he even calls the police -- that would the University Police, they have jurisdiction on Grounds. He hasn't been arrested before, so University leadership -- to whom the University Police report, cut a deal. Ater all, the University doesn't like scandal or publicity but works on the "Somebody has to go down for this" principle. I vote for the coach losing his keys and agreeing to some kind of counseling (or not) and that brave employee? He has to go. Best case - a year's severance and a non-disclosure. Or maybe he wasn't really performing anyway and isn't renewed. I bet he was always an attitude problem. Sound like VQR? Mmm. President Sullivan was so new she may not have known she was being snookered on that one so UVA avoided a lawsuit and literary Penn State played out here - let's hope she takes some overt action to show faculty, staff, students and the community she means what she said this time.
Ernest- you are just kidding aren't you? I would think that the PSU case will change the way this type of thing is looked at everywhere from now on.
Don't just be a bystander or a witness- get involved in stopping this type of thing instead of running to the police and trying to tell a story that they probably will not believe.
Confront the attacker, help the victim and take lots of pictures.
If the police and institution will not take action, you will be able to find someone who will.
It is just like a parent who you see yelling and manhandling their child............stare 'em down and they will get the point for sure..........
Get involved.
HarryD you are naive. The assistant coach DID get involved. At the risk of his career, he told Paterno, because Paterno was the only person powerful enough to do take on the system and do something about what happened. You think the assistant coach had his cell phone in the shower and took a picture of the rape in progress? Or had the presence of mind to do so?
Who do you suggest telling if the police and "the institution" don't take action? I think that is the point.
Kevin Morrissey tried telling the institution and no one would believe him. His sister told the national press and the institution's "investigation" revealed nothing bad. The supervisor is still there and all the employees quit.
No walk ever followed the talk - no antibullying policies, and none of the recommendations happened. "They" never got the point on VQR and the "someone" never showed up to take action. Wishful thinking. That's why I await President Sullivan taking an action that will show she means business. She could start with Human Resources.
Ernest- you are right I am naive. IT'S A CRIME!!!!
Wonder if he would have reported to the cops if he had seen someone breaking into the locker room, the equipment room, the trophy case- hum?????? Dam (sic) right he would have- think he would have gone to his daddy and the "king"- only after he reported teh d\crime against his precious little football program. Same with paterno.
Start with the cops. Its a crime.
Tell the DA! It is a criminal offense.
Tell the PRESS for the sake of the VICTIMS! (remember them?)
Paterno is now the deposed King of Crappy Valley. Maybe he can claim he was old and decrepit.
Oh yes Penn State does have something in common with UVA. Any school that refuses to adhere to the legal standards of the United States, sets up their own police force and mandates the reporting of all crimes to that local police force is setting themselves up for an abuse of power situation. This has happened repeatedly at UVA- I personally know of two situations. Mind you these were assults of students at UVA not children and one was a sexual assult one was a physical assult. In both cases the people one male one female were told not to take the complaint any further as it would be an honor code issue. You, the 80 years resident of Cville, must have spent many of those decades with your eyes closed or certainly NOT on the UVA grounds.. When is the last time you met, talked to, or cared about ANY of the women or peoplewhose issues have been reported in the press? Do you think that they are all making these things up? Maybe in the 50s there were no assults, no drunken lacrose or rugby players beating up their girlfriends on the grounds, in fraternity houses at fraternity house parties. Maybe. Or maybe UVA had a dont ask dont tell policy about molestating women, who by definitiion werent UVA students when you were at UVA. Your exulted Dean Casteen referred to Yeardley Love as one of your own while ignoring Morgan Harrington who was taken at UVA and either killed there or killed nearby since she was NOT one of yur own. Face it, whenever a insular society decides to appoint itself as judge as jury and police force, abuses occur. Thank goodness that UVA doesnt have prominent authority figures accused of child molestateion. But they have certainly turned a blind eye to numerous female assults.
cat- fairly sure that it happens anywhere you have 21k+ kids mixed up in a city of 43K......there are many schools and universities that have their own police force, primarily because a city does not want to be taxed for or involved int that policing.
Harry the numbers may be right but I guarantee that noone send their kid to a school if they dont think that kid will be safe. The topic of schools using their own law enforcement is being looked at in Richmond this week. I know that UVA has a large endowment, and great investment results on that endowment, they can afford to pay something back to the community instead of using rent a a cops and the honor council to judge crimes at the university. Again, you may be right on the numbers and the taxation issue is a very fair question, but after Yeardley,(Morgan), and Penn State, an insitution that insists on its own internal police force may let itself open for a huge financial liability if it can be proven that they have not followed legal standards in protecting and reporting offences on campus.
HarryD: "a city does not want to be taxed for or involved int that policing". I've heard that argument before, and it doesn't hold water. Charlottesville does not want to pay to investigate felony crimes taht occur on grounds? Well, these kids pay rent, eat in your restaurants, buy your goods in the local sotres, and yes, some even pay taxes because they own homes in the area. having police protection is their right. It doesn't matter if a rape occurs on grounds or off grounds - police response should be the same. The only way these students will receive proper investigations will be for the laws and codes to be revised to MANDATE joint collaboration on Felony crimes. The Hook has covered this in the past -- the proposed law is HB 2490, introduced by Delegate Paula Miller of Norfolk.
Tomorrow, Nov 16th, the VA Crime Commission will hear testimony on HB2490. UVA cops will be there en force to try and intimidate the speakers and persuade the Commission not to adopt the bill. Anyone who is in support of this bill should immediately send an email to Delegate Rob Bell and urge him to support this legislation. His email is; email@example.com
I do hope the bill passes.......but it is a big community of kids alien to the area and that makes it a tough job.
Perhaps it is time for the rent-a-cops to go away..............


text:
The "Little Used" Store
Online thrift store and home school educational help. Helpiing parents with education while provide a nice shopping experience for antiques & Collectibles.
We are online sellers worldwide of unique and
hard to find gifts, coins, collectibles, Disneyana, and mini books. Items ship
same or next business day after we receive payment. Unique affordable quality
products. Fast friendly customer service. BUY WITH CONFIDENCE - YOUR PURCHASE IS
Good N Ready To Go
Musicbox Mall, music boxes - jewelry boxes
Musicbox Mall has elegant and creative varieties of rich- appearance music boxes, take a look at these goodies, leather jewelry boxes, musical jewelry boxes.
My Funny Bunny
Baby Nursery Goods, Toys & Gifts for Yummy Mummies & Rockin Cool Kids. Brands
Samsonite, Cosatto, Amazonas, Moover Danish Toys, Little Lamb Cloth Nappies,
Cariboo of New Zealand, ShooShoos, Inch Blue, HipptChick, Seedbom, My Funny
Bunny, Taf Toys, Funny Banana, East Coast, Britax, Saplings, Tomy & Much More!


text:
© University of Massachusetts Amherst. All rights reserved.
Jean Lewis, ca.1935
Excerpted from
Jean, as Gertrude Minnie Lewis was known to friends, was born May 11, 1896, in Pittsburgh, Pennsylvania to a coal miner, William H. Lewis and his wife Minnie (Bienfang) Lewis. She was the third of five children: Willie, Harry, Gertrude, Ernestine, and Minnie. When Jean was seven, in 1903, Willie died at age eleven; her father died two years later, age 33. Her mother remarried to Paul David Close, by whom she begat three other children: a daughter Thelma and two sons, Paul and Carl.
Jean's early childhood was severely unhappy. Her family was poor, and her father's death left them in dire straits. Whatever the particulars, the years were sufficiently grim that Jean at some point left home. She never talked about those matters, save to her beloved friend and lifemate, Ruth Totman.
In 1913, when she was 17 years old, Jean was working in Bellaire, Ohio, perhaps as a waitress in a bar or cafe that catered to the river's traffic in boatmen and other transients. And perhaps it was there that she was found by the minister Joseph Nelson Scholes. He befriended her at some point and provided enough assistance so that she could resume her education, completing high school in Johnstown, PA in 1918 at age 22. Reverend and Mrs. Scholes took Jean into their family, and she became a de facto step-daughter, sibling to their three children, and at ease calling them Dad and Mother.
After high school Jean may have pressed on with her schooling, on a part-time basis at least, because in 1921 she secured a job as an elementary teacher, grades 4-6, in the public schools of Johnstown. For the next several years she taught grade-school children during the day and high school English at night school for adults. She also attended summer school at Ohio State University in Columbus, earning a BS in education in 1928, age 32. She then took a job in teacher education at Indiana State Teachers College in Indiana, Pennsylvania (some 30 miles northeast of Pittsburgh). There she met Ruth Totman, and the two newly arrived teachers agreed to share an apartment. They ended up sharing a lifetime.
While teaching at Indiana State, Jean continued her studies in education, pursuing MA work part-time at New York University and receiving the degree in 1933. She also took summer jobs as a demonstration teacher at Rutgers University in New Jersey, and in 1936 she left Indiana State and worked for the year '36-37 as supervisor of elementary education at a private school in Trenton. In 1936 Ruth, who was a teacher of physical education, also left Indiana State. Ruth went to work at New Jersey College for Women (NJC, later Douglass College in Rutgers University). Jean and she continued to develop their friendship, perhaps sharing Ruth's place in New Brunswick.
By then Jean was becoming a regular visitor to Ruth's natal home in Conway, Mass., endearing herself to Ruth's nieces and nephews both there and in nearby towns. And in the fall of 1938 she moved to New England, having taken a job as supervisor of elementary education in the Winchester, Mass. Public school.
Then in 1943, while World War II was approaching its height, she decided to pursue further schooling. After weighing the relative merits of full-time and part-time study, she decided to resign from Winchester and become a full-time student, working toward a PhD in education at Yale University. She supported herself by serving as a part-time instructor, for which she was amply qualified by her years of experience. She completed her course work and under the supervision of Dr. Bessie Lee Gambrill wrote a doctoral thesis titled "Problem Solving Opportunities in Fifth Grade Social Studies." In 1947, at age 51, she received her degree.
The previous year, with her doctoral work nearly done, Jean had accepted a post in Concord, New Hampshire as Director of Elementary Education in the State Department of Education, which was headed by Edgar Fuller. There she worked until 1949.
In the meantime, Ruth had left NJC in 1943 to head the program in women's physical education at Massachusetts State College, later University of Massachusetts, in Amherst. It gave her and Jean several years when they were near enough to spend vacation time and occasional weekends together, visiting family and friends and puttering around the house they jointly owned on Strong Street in Amherst.
In 1949, after Edgar Fuller took a job heading the U. S. Office of Education in Washington, D.C., Jean accepted a post in that Office as Specialist for Upper Grades. She moved to Washington and settled in. But she was there only a few months when she was invited to spend the school year 1950-51 serving as Consultant in Elementary Education in the Education Section of the Allied Occupation government in Japan (SCAP), which was pursuing reforms of the Japanese educational system.
She accepted the offer, was given a leave of absence by USOE, and flew to Tokyo in August 1950. Until then Jean had had no occasion to study Japan, but once in Tokyo she tried to acquire insight into the society and to share it with Ruth and others by sending them lengthy newsletters every week or two. Those letters reveal that the eight months in Japan were one of the most eye-opening periods of her life, as she struggled to comprehend the unfamiliar and cope with life's difficulties, uncertainties, and unexpected delights. At the time, moreover, the Korean War was raging, and the emotional roller coaster that accompanied the wild and abrupt swings of battlefield fortune was fully reflected in her letters. But even as the adult world filled her with an unaccustomed perplexity and periodic apprehension, the children continued to delight her, and language barrier notwithstanding, she found it easy to win their hearts and enjoy their company when opportunity allowed.
During her time in Japan Jean ran two semester-length seminars on early childhood development and the arts of teaching young children and training teachers for such work. Her students were professors of education and teacher training who gathered from all across the country to attend class at Ochanomizu University's temporary campus in Yokohama (the original campus had been destroyed by wartime bombing). She also visited kindergartens and elementary schools and spoke to assemblies of teachers and school officials at several sites about the country. In the course of her stay in Tokyo she formed a number of enduring friendships, and after her retirement to Amherst she had many visitors from Japan.
From her return to Washington in April 1951 until her retirement from the Office of Education in January, 1966, Jean stayed busy with official tasks and diverse special assignments. She traveled widely about the country, studying educational conditions, lecturing, and conducting workshops for teachers and school officials, state and local, in nearly every state and Puerto Rico. At one time or another she worked on the problems of educating exceptionally gifted children, the children of migrant laborers, and children living on Native American reservations.
In the course of her career Jean also taught future teachers on many campuses, including Harvard, Johns Hopkins, Rutgers, Westminster, and the University of Maine, as well as Indiana State and Yale. She also authored numerous articles on elementary schooling and childhood development, which appeared in volumes and professional journals as well as pamphlets. She also collaborated on authoring books, one being a social studies text in which she reportedly wrote a chapter on farm life, using the Totman farm in Conway as her model.
During 1966-68 Jean collaborated with Ruth and two other specialists in an intensive study of Connecticut schools' approach to health and physical education. Their findings led to changes in the state's Elementary School programs and to the publication of a book,
After completing that job and a one-year visiting professorship at Westminster College in Pennsylvania, Jean settled in Amherst in 1968. There she shared the Strong Street home with Ruth and Helen Curtis, Dean of Women at U. Mass. and Ruth's housemate since 1945. A few years later Helen married and moved to North Amherst, so Ruth and Jean finally were reunited with a house to themselves, completing the circle begun in Indiana, PA a half century earlier.
During their retirement years, the two, sometimes joined by Helen, found the energy to make a number of trips about the world. Following Ruth's death in 1989, Jean stayed at the Strong Street house for another year, finally concluding that it was too much to maintain. She then moved to an apartment in North Amherst, a few doors down from Helen, remaining there until 1993.
After a fall restricted her to a wheelchair, she moved to the Amherst Nursing Home where she lived for three years. She died there on December 10, 1996, a few months after celebrating her hundredth birthday. Her ashes were interred beside Ruth in the Totman family plot in Pine Grove Cemetery in Conway.
The Gertrude M. Lewis Papers document a majority of the work and life of an educator of the masses, a traveler of the world, and a woman of the twentieth century. Living for just over 100 years, Lewis was a witness to, and a participant in, the enormous amount of change that occurred between her birth in 1896 and her death in 1996. Documents pertaining to her work as an educator of both young students and veteran teachers show the changes within the theory and practice of pedagogy over time, over various geographic locales, and also highlight her role in that change. This collection also documents the numerous on-going side projects on which Lewis worked, for instance fostering creativity in schoolchildren, a biography of Franklin D. and Eleanor Roosevelt, and even her own original poetry and prose. In addition to records of her work as a teacher, other documents showcase her work as a student, such as academic transcripts, correspondence, and notably, her lengthy Ph.D. dissertation, entitled
Lewis' cherished personal materials are another significant part of this collection. Honest and descriptive letters along with photographs and other mementos highlight her own experiences, her everlasting friendships, and her painful losses. Of particular note is the contribution to this collection by Conrad Totman, nephew of Ruth Totman. Lewis was an important figure in his life, and he in hers. So much so was their bond that Totman was asked to be the conservator of her estate in the winter of her life. Not solely the donator of these papers, Totman added significantly to the interpretation and organization of this collection. All of the documents found herein dated after Lewis' death pertain to Totman's efforts to sustain her legacy.
The collection is open for research.
Acquired from Conrad D. Totman, 2005.
Lewis' 8mm film of Japanese schoolchildren, 1951, has been digitized and is available online:
Processed by Alexander D. McKenzie, April 2006.
See also the closely related collections for Lewis' friends:
This series is comprised of materials regarding Lewis' professional activities. A majority of the correspondence covers topics such as job offers, conference invitations, and recommendations by her peers, to name a few. Federal documents such as pay stubs, civil service materials, and official orders, highlight her work with the U.S. Department of Education, as well as her temporary assignment to S.C.A.P. in Japan. Newspaper clippings document her work traveling all over the United States as a consultant, lecturer, and occasional teacher. All of the clippings have been photocopied for research purposes. Also included is a photocopy of a news-clipping scrapbook about Lewis, which was put together by Conrad Totman's mother, Mildred. In this series too are documents relating to the extracurricular projects that particularly interested Dr. Lewis, such as the education of Navajo children and documents relating to the book,
The contents of this series consists of various documents and artifacts of personal importance to Dr. Lewis. Correspondence to friends, acquaintances, and family highlight her sustained relationships. For example, letters from colleagues and students in Japan, whom she taught in the 1950s, were still arriving in her mailbox over thirty years later. Of particular note are the letters that Lewis penned to Ruth Totman while in Japan from 1950-1951. Honest and highly descriptive, these letters show Lewis' personal side in a light little seen in her professional materials. Personal education materials, such as transcripts, her Ph.D. thesis, and other administrative materials, illustrate her career as a student. Also included are contributions from Conrad Totman, in the form of a short biography entitled,


text:
Setting up Bluetooth for NXT
From ROBOTC API Guide
NXT → Setting up NXT Bluetooth
|For ROBOTC Bluetooth NXT functions, check out the NXT Bluetooth Functions page!
Installing USB Adapter Drivers
|Before you can use your Bluetooth USB adapter with ROBOTC, you must install the drivers and set up the device for use. This guide is for Windows 7, other operating systems have varying procedures.
Note: Not all Bluetooth adapters will work with the NXT brick due to its built-in chip limitations. ROBOTC community member Laurens has compiled a great list of adapters that are known to work with the NXT bricks, complete with a listing of internal laptop adapters. Check it out at her blog, robotquare.com
|1. Start Windows and plug in USB adapter. Windows should automatically recognize and install your device. If you do not see a popup near the notifications area like the one shown below, click here for some workarounds.
|2. Open the Start Menu, click on Devices and Printers, right click on the appropriate adapter, and select "Bluetooth Settings".
|File:Windows Install 3
|3. Make sure "Allow Bluetooth devices to find this computer", "Allow Bluetooth Devices to connect to this computer", and "Alert when a new Bluetooth device wants to connect" are checked.
|File:Windows Install 4
|4. Turn on the NXT brick, navigate to the Bluetooth menu, and make sure Bluetooth is turned 'On' and Visibility is set to 'Visible'; then, select 'Search'. This will start the pairing process between the NXT and the computer. You will still need to register the device in ROBOTC to compile wirelessly (instructions below).
|5. The NXT will pull up all available devices within range, including other eligble NXT bricks, that have Bluetooth enabled and turned on. Select your computer from the list and select 'Connect'. If you do not know your computer's name, navigate to Start Menu> All Programs> Accessories> System Tools> System Information. Your computer's name is "System Name".
|6. Select which port on the NXT you would like to save the connection to and enter your passkey when prompted (1234 by default) and select the check mark.
|7. Windows should recognize that there is a new connection and will pop up another notification saying so. Click on the notification and enter the passkey for the NXT when prompted, then click 'Next'.
|File:Windows Install 5
|8. Windows will finish connecting to the NXT and display "Your device is ready to use notification" when completed.
PC/NXT Pairing with ROBOTC
Connecting Two NXT Bricks
Disconnecting Two NXT Bricks