DFIR Training Blog



New Digital Corpora Forensic Test Images

The Digital Corpora was updated with some new forensic test images !  The list of forensic test images on  https://www.dfir.training/resources/references/test-images-and-challenges/test-images-and-challenges/all  is a very popular page as it links to multiple TERABYTES of forensic test images .  So, when a new test image is added, it is quite exciting to start downloading to test your tools or use in a class, or just for plain practice.



This new set of forensic images include: cell phones, tablets, hard drives, and packet dumps!  And it's not just random images of devices as they are all based on a scenario.  Just as neat....you can download a teacher's guide with the images. How cool is that?

 " The scenario was created during the summer of 2012 as part of a joint collaboration between the U.S. Naval Postgraduate School and the U.S. Military Academy at West Point." -  http://digitalcorpora.org/corpora/scenarios/national-gallery-dc-2012-attack  


The availability of forensic test images is one of the most helpful resources to learn forensics. You can practice without fear of making mistakes. Actually, you want to make mistakes and learn from them as these mistakes on test images help you grow without risking harm to a real case. When I started out in forensics (the days of the floppy.....), I ran around the office looking for every floppy I could find to practice.  You can imagine my joy in finding a box full of used floppies, in the office supplies closet in which the floppies were to be re-used. Of course...I found lots of juicy files that were deleted and recovered with my trusty FTK v1.

Written by :Brett Shavers

{rscomments option="com_rsblog" id="35"}