Paper | Presentation Conference Downloads Author
Workshop: SOLVE-IT – The digital forensic technique knowledge base DFRWS APAC 2025 Chris Hargreaves
All Your TLS Keys Are Belong to Us: A Novel Approach to Live Memory Forensic Key Extraction DFRWS APAC 2025 Daniel Baier, Martin Lambertz
Advanced Forensic Recovery of Deleted File Data in F2FS DFRWS APAC 2025 Junghoon Oh, Hyunuk Hwang
From Sync to Seizure: A Binary Instrumentation-based Evaluation of the iCloud Backup Process DFRWS APAC 2025 Julian Geus, Jan Gruber, Jonas Wozar, Felix Freiling
Media Source Similarity Hashing (MSSH): A Practical Method for Large-Scale Media Investigations DFRWS APAC 2025 Samantha Klier, Harald Baier
DEF-IPV:A Digital Evidence Framework for Intimate Partner Violence Victims DFRWS APAC 2025 Kyungsuk Cho, Kyuyeon Choi, Yunji Park, Minsoo Kim, Seoyoung Kim, Doowon Jeong
A Study on the Recovery of Damaged iPhone Hardware Exhibiting Panic Full Phenomena DFRWS APAC 2025 Sunbum Song, Hongseok Yang, Eunji Lee, Sangeun Lee, Gibum Kim
DF-Graph: Structured and Explainable Analysis of Communication Data for Digital Forensics DFRWS APAC 2025 Jeongin Lee, Chaejin Lim, Beomjin Jin, Moohong Min, Hyoungshick Kim
Towards a standardized methodology and dataset for evaluating LLM-based digital forensic timeline analysis DFRWS APAC 2025 Hudan Studiawan, Frank Breitinger, Mark Scanlon
Dial M for Mixer: A Methodological Approach to Forensic Analysis of Unknown Devices Using the Thermomix TM6 DFRWS APAC 2025 Maximilian Eichhorn, Felix Freiling
Data Hiding in File Systems: Current State, Novel Methods, and a Standardized Corpus DFRWS APAC 2025 Anton Schwietert, Jan-Niclas Hilgert
Automatically generating digital forensic reference data triggered by mobile application updates DFRWS APAC 2025 Angelina A. Claij-Swart, Erik Oudsen, Bouke Timbermont, Christopher Hargreaves, Lena L. Voigt
Creating a Standardized Corpus for Digital Stratigraphic Methods with fsstratify DFRWS APAC 2025 Julian Uthoff, Lisa Marie Dreier, Martin Lambertz, Mariia Rybalka, Felix Freiling
LangurTrace: Forensic analysis of local LLM applications DFRWS APAC 2025 Sungjo Jeong, Sangjin Lee, Jungheum Park
Advanced Monero Wallet Forensics: Demystifying Off-Chain Artifacts to Trace Privacy-Preserving Cryptocurrency Transactions DFRWS APAC 2025 Jeongin Lee, Geunyeong Choi, Jihyo Han, Jungheum Park
Workshop: Applied Memory Forensics: Extracting and Analyzing Malware in Incident Response DFRWS APAC 2025 Ricardo J. Rodríguez
Workshop: Chain of Infection Detection: A Hands-On Workshop on Forensic Timeline Analysis DFRWS APAC 2025 Gaurav Gogia
Workshop: Practical macOS DFIR DFRWS APAC 2025 Bhargav Rathod
Workshop: Hands-On Elasticsearch for Digital Forensics: Learning from Windows eBPF Logs DFRWS APAC 2025 Philgeun Jin and Namjun Kim
Workshop: Forensic Procedures Under the Microscope — Improving Forensic Rigor with SOLVE-IT DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Eoghan Casey, Christopher Daywalt, Chris Hargreaves
Workshop: Empowering ICAC Investigators and Digital Forensics Examiners: Leveraging Free and Emerging Tools in Digital Forensics to Find and Rescue Children​ from Sexual Exploitation DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Cory Hall, Jeremy Girard, Jeff Rutherford
Workshop: Modern Memory Forensics with Volatility 3 DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Andrew Case, Hala Ali
Workshop: Kubernetes Security — Hands-On Attack and Defense DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Lenin Alevski
Workshop: From Narrow AI to Generative AI: Integrating AI in Your Daily DFIR Life DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Jess Garcia
Workshop: Adapting to evolving threats and strengthening security with Purple Teams DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Natalia Ciapponi, Maristela Ames
Improved Bitcoin simulation model and address heuristic method DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Yanan Gong, Kam Pui Chow, Siu Ming Yiu
Out of Control: Igniting SCADA Investigations with an HMI Forensics Framework and the Ignition Forensics Artifact Carving Tool (IFACT) DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Lasean Salmon, Ibrahim Baggili
Forensic recovery via Chip-Transplantation in Samsung Smartphones DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Sunbum Song, Gibum Kim, Hongseok Yang, Eunji Lee, Sangeun Lee
Enhancing DFIR in Orchestration Environments: Real-time Forensic Framework with eBPF for Windows DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Philgeun Jin, Namjun Kim, Doowon Jeong
An Extensible and Scalable System for Hash Lookup and Approximate Similarity Search with Similarity Digest Algorithms DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Daniel Huici, Ricardo J. Rodríguez, Eduardo Mena
Bytewise Approximate Matching: Evaluating Common Scenarios for Executable Files DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Carlo Jakobs, Axel Mahr, Martin Lambertz, Mariia Rybalka, Daniel Plohmann
If At First You Don’t Succeed, Trie, Trie Again: Correcting TLSH Scalability Claims for Large-Dataset Malware Forensics DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Jordi Gonzalez
Uncovering Linux Desktop Espionage DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Lukas Schmidt, Sebastian Strasda, Sebastian Schinzel
ANOC: Automated NoSQL Database Carver DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Mahfuzul I. Nissan, James Wagner, Alexander Rasin
Exploiting Database Storage for Data Exfiltration DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary James Wagner, Alexander Rasin, Vassil Roussev
SoK: Timeline based event reconstruction for digital forensics: Terminology, methodology, and current challenges DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Frank Breitinger, Hudan Studiawan, Chris Hargreaves
Your Forensic AI-Asisstant, SERENA: Systematic Extraction and Reconstruction for ENhanced A2P Forensics DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Jieon Kim, Byeongchan Jeong, Jungheum Park, Seungeun Park, Sangjin Lee
Bridging Knowledge Gaps in Digital Forensics using Unsupervised Explainable AI DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Zainab Khalid, Farkhund Iqbal, Mohd Saqib
Leveraging Memory Forensics to Investigate and Detect Illegal 3D Printing Activities DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Hala Ali, Andrew Case, Irfan Ahmed
Detecting Hidden Kernel Modules in Memory Snapshots DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Roland Nagy
Memory Analysis of the Python Runtime Environment DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary Hala Ali, Andrew Case, Irfan Ahmed
Modeling uncertainty factors in digital forensic science DFRWS EU 2025 Elénore Ryser
System Bias in the Interorganisational Environment of Digital Forensics DFRWS EU 2025 Laura Vom Kolke, Nina Sunde and Brita Bjørkelo
Secrets in Motion: Dynamic TLS Key Recovery DFRWS EU 2025 Daniel Baier and Martin Lambertz
Mobint – an advanced platform supporting integration and analysis of mobile data coming from various sources DFRWS EU 2025 Kamil Piętak, Jacek Dajda and Marek Kisiel-Dorohinicki
A discussion of sources and quality/reliability of events for timelines DFRWS EU 2023 Céline Vanini, Frank Breitinger and Christopher Hargreaves
Tumbling Down the Stairs: Exploiting a Tumbler’s Attempt to Hide with Ordinary-looking Transactions using Wallet Fingerprinting DFRWS EU 2025 Jan Zavřel, Michal Koutenský, Daniel Dolejška, Vladimír Veselý
Unmixing the mix: Patterns and challenges in Bitcoin mixer investigations DFRWS EU 2025 Pascal Tippe, Christoph Deckers
Deep Reasoning and Large Context Windows: Next-Generation AI in Digital Forensic Investigations DFRWS EU 2025 Hans Henseler, Timo Mecon
Beyond Hamming Distance: Exploring Spatial Encoding in Perceptual Hashes DFRWS EU 2025 Sean McKeown