SOLVE-IT is a knowledge base of digital forensics techniques along with potential weaknesses and mitigations. It was launched in April at DFRWS EU 2025.
While the GitHub repository evolves every week we are going to issue some static releases at points throughout the year with some developments highlighted, along with accessible versions that can be downloaded for review and comment.
We are therefore happy to announce the first release: SOLVE-IT Alpha Release v0.2025.07 (July 2025).
Since the DFRWS EU 2025 conference we have focused on some core improvements, documentation and accessibility, code refactoring, and testing.
Documentation and Accessibility
- The readme has been updated along with a specific guidance document on contributing.
- The issue tracker has been updated with GitHub templates, making it easier to suggest new or updated techniques and weaknesses.
- An examples repository has also been created with demonstrations of the use of SOLVE-IT to examine a sample disk imaging process.
Content updates
There are also many updates to the knowledge base content. We have now indexed:
- 117 techniques (detailed content provided for 45 of them so far)
- 188 weaknesses
- 137 mitigations
… and many more are recorded in the issue tracker waiting for further details and implementation.
Techniques that have been added include:
- Memory acquisition via cold boot attack,
- Determine connected devices,
- Visualization of geolocation information, and
- Preserving reference data (inspired by Spichiger & Adelstein (2025) talk at DFRWS EU).
We are off to a good start getting the infrastructure in place, many good conversations starting, and the content is starting to grow.
A workshop is planned at DFRWS USA 2025 in July so if you are interested in learning more about how to use SOLVE-IT or to contribute do sign up for the workshop.
We hope that the community contributions will continue to increase and we look forward to writing the update for the next release.
— Chris Hargreaves & Eoghan Casey