Main Page

WIKI NEWS

2019-12-15: Forensic Wiki has restored by Simson Garfinkel at https://forensicswiki.xyz/ after it was abandoned by the company that acquired it.

2013-05-15: You can now subscribe to Forensics Wiki Recent Changes with the ForensicsWiki FeedBurner Feed

Featured Forensic Challenge Digital Forensic Research Workshop The current Digital Forensic Research Workshop (DFRWS) is about the Internet of Things (IoT). Analysis of devices and network data including a Smart TV Raspberry Pi and Amazon Echo cloud data are part of the scenario. See more about DFRWS here... (See also Past Selected Research)

Featured Article Apple File System (APFS) APFS, or Apple File System, is the file system designed by Apple Computer to supersede HFS+ and take advantage of flash/SSD storage and native encryption support. APFS also introduced file system snapshots, support for sparse files, and greater time stamp granularity. Read More...

Topics File Analysis: File Formats: PDF, DOC, DOCX, JPEG, GIF, BMP, LNK, MP3, AAC, Thumbs.db, ... Forensic file formats: AFF, gfzip, sgzip, ... File Systems: FAT, NTFS, ext2/ext3, ufs, ffs, reiserfs, ... Cryptographic File Systems: File Vault, EFS, CFS, NCryptfs, TCFS, SFS, ... Hardware: Busses: IDE, SCSI, Firewire, USB, ... Media: RAM, Hard Drives, Memory Cards, SmartCards, RFID Tags... Personal Digital Devices: PDAs, Cellphones, SmartPhones, Audio Devices, ... Other Devices: Printers, Scanners, ... Write Blockers: ... Recovering data: bad data, deleted data, overwritten data, Sanitization Standards Encryption GPS Forensic Corpora Network forensics: OS fingerprinting, Hidden channels, Proxy servers Steganography, Steganalysis Metadata: MAC times, ACLs, Email Headers, Exif, ID3, OLE-2, ... Legal issues: Case law Further information: Books, Papers, Reports, Journals, Websites, Blogs, Mailing lists, Organizations, Vendors, Conferences

Tools Disk Imaging: dd, dc3dd, dcfldd, dd_rescue, sdd, aimage, Blackbag, ... Data Recovery: ... Disk Analysis: EnCase, SMART, Sleuthkit, foremost, Scalpel, frag_find... Live CDs: DEFT Linux, Helix (Pro), FCCU Gnu/Linux Boot CD, Knoppix STD, ... Metadata Extraction: wvWare, jhead, hachoir-metadata, Photo Investigator... File Analysis: file, ldd, ltrace, strace, strings, ... Network Forensics: Snort, Wireshark, Kismet, NetworkMiner... Anti-Forensics: Slacker, Timestomp, wipe, shred, ... Other Tools: biew, hexdump, MailXaminer... Categories The contents of this wiki are organized into various categories: Tools Disk file systems File Formats Howtos Licenses Operating systems People Bibliographies

You can help! We have a list of articles that need to be expanded. If you know anything about any of these topics, please feel free to chip in.