ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Main Page

From ForensicsWiki
Revision as of 15:14, 19 March 2012 by Simsong (Talk | contribs)

Jump to: navigation, search

This is the Forensics Wiki, a Creative Commons-licensed wiki devoted to information about digital forensics (also known as computer forensics). We currently list a total of 860 pages.

Much of computer forensics is focused on the tools and techniques used by investigators, but there are also a number of important papers, people, and organizations involved. Many of those organizations sponsor conferences throughout the year and around the world. You may also wish to examine the popular journals and some special reports.


2012-feb-25: We continue to have problems with our hosting provider and are in the process of identifying a new one. Thank you for your patience.

Featured Forensic Research

Mar 2012

Robert J. Walls, Brian Neil Levine, Marc Liberatore, Clay Shields - {Effective Digital Forensics Research is Investigator-Centric}
Proc.\ USENIX Workshop on Hot Topics in Security (HotSec) , August 2011
Author : Robert J. Walls, Brian Neil Levine, Marc Liberatore, Clay Shields
Title : {Effective Digital Forensics Research is Investigator-Centric}
In : Proc.\ USENIX Workshop on Hot Topics in Security (HotSec) -
Address :
Date : August 2011

Many technical mechanisms across computer security for attribution, identification, and classification are neither sufficient nor necessary for forensically valid digital investigations; yet they are often claimed as useful or necessary. Similarly, when forensic research is evaluated using the viewpoints held by computer security venues, the challenges, constraints, and usefulness of the work is often misjudged. In this paper, we point out many key aspects of digital forensics with the goal of ensuring that research seeking to advance the discipline will have the highest possible adoption rate by practitioners. We enumerate general legal and practical constraints placed on forensic investigators that set the field apart. We point out the assumptions, often limited or incorrect, made about forensics in past work, and discuss how these assumptions limit the impact of contributions.

(See also Past Selected Articles)

Featured Article

Forensic Linux Live CD issues
Forensic Linux Live CD distributions are widely used during computer forensic investigations. Currently, many vendors of such Live CD distributions state that their Linux do not modify the contents of hard drives or employ "write protection." Testing indicates that this may not always be the case. Read More...


You can help! We have a list of articles that need to be expanded. If you know anything about any of these topics, please feel free to chip in.