| Paper | Presentation |
Conference |
Downloads |
Author |
| Boon or Bane: Source Camera Identification meets AI-generated Images |
DFRWS EU 2026 |
|
Samantha Klier and Harald Baier |
| VAAS: Vision-Attention Anomaly Scoring for Image Manipulation Detection in Digital Forensics |
DFRWS EU 2026 |
|
Opeyemi Bamigbade, Mark Scanlon and John Sheppard |
| Enhancing Abnormality identification: Robust Out-Of-Distribution strategies for Deepfake Detection |
DFRWS EU 2026 |
|
Fabrizio Casadei, Luca Maiano and Irene Amerini |
| REPDF: Repairing Corrupted PDF Files through Font Mapping and Object Relationship Reconstruction |
DFRWS EU 2026 |
|
Seungeun Park, Byeongchan Jeong, Jieon Kim and Jungheum Park |
| Structural Analysis of the Windows NT Heap for Memory Forensics |
DFRWS EU 2026 |
|
Daniel Uroz, Abraham D ́ıaz-Campo Pinilla and Ricardo J. Rodr ́ıguez |
| Resilience of Forensic Evidence Acquisition Under Database Schema Drift |
DFRWS EU 2026 |
|
Afiqah M. Azahari, Andrea Oliveri and Davide Balzarotti |
| Ctrl+Alt+Deceit: Policing the Deepfake Dilemma |
DFRWS EU 2026 |
|
Áine MacDermott |
| Needle in a case: Scalable search over large-scale image corpora in forensic applications |
DFRWS EU 2026 |
|
Kamil Faber, Dominik Żurek, Kacper Bujak , Monika Selegrat, Kamil Piętak |
| Plug to Place: Indoor Multimedia Geolocation from Electrical Sockets for Digital Investigation |
DFRWS EU 2026 |
|
Kanwal Aftab, Graham Adams and Mark Scanlon |
| AutoDFBench 1.0: A Benchmarking Framework for Digital Forensic Tool Testing and Generated Code Evaluation |
DFRWS EU 2026 |
|
Akila Wickramasekara, Tharusha Mihiranga , Aruna Withanage, Buddhima Weerasinghe, Frank Breitinger, John Sheppard and Mark Scanlon |
| CPR: Corrupted PDF Recovery Algorithm for Digital Forensic Investigations |
DFRWS EU 2026 |
|
Seoyoung Kim, Yunji Park, Woobeen Park and Doowon Jeong |
| Addressing the Dataset Gap Problem with Generative AI: Towards LLM-driven Forensic Scenarios for Dataset Generation |
DFRWS EU 2026 |
|
Michael Plankl, Thomas Göbel and Harald Baier |
| Hey GPT-OSS, Looks Like You Got It – Now Walk Me Through It! An Assessment of the Reasoning Language Models Chain of Thought process for Digital Forensics |
DFRWS EU 2026 |
|
Gaëtan Michelet, Janine Schneider, Aruna Withanage and Frank Breitinger |
| DroPTC: Sentence-Level Drone Flight Log Forensics Using Contrastive Learning and Explainable AI |
DFRWS EU 2026 |
|
Swardiantara Silalahi, Tohari Ahmad, Hudan Studiawan and Frank Breitinger |
| Ex Machina: A Forensic Evaluation of AI Companion Applications and Their Evidentiary Value |
DFRWS EU 2026 |
|
Kendall Comeaux, Trevor Spinosa, Ali Ghosn and Ibrahim Baggili |
| Down the Rabbit-Hole: A forensic analysis of the Matrix protocol and Synapse server |
DFRWS EU 2026 |
|
Yikai Wang, Xuepei Zhang, Shufan Wu and Yan Cheng |
| The Investigator’s Friend and Foe: A Forensic Analysis of GrapheneOS |
DFRWS EU 2026 |
|
Katharina De Rentiis, Julian Geus and Felix Freiling |
| Forensic Activity Classification Using Digital Traces from iPhones: A Machine Learning-based Approach |
DFRWS EU 2026 |
|
Conor McCarthy, Jan Peter van Zandwijk, Marcel Worrin and Zeno Geradts |
| Inside the Black Box: In-Depth Analysis of Geolocation Mechanisms in Android Mobile Devices |
DFRWS EU 2026 |
|
Samuele Mombelli and Thomas R. Souvignet |
| LEMON: A Universal eBPF-based Volatile Memory Acquisition Tool for Modern Android Devices and Hardened Linux Systems |
DFRWS EU 2026 |
|
Andrea Oliveri, Marco Cavenati, Stefano De Rosa, Sudharsun Lakshmi Narasimhan and Davide Balzarotti |
| Workshop: SOLVE-IT – The digital forensic technique knowledge base |
DFRWS APAC 2025 |
|
Chris Hargreaves |
| All Your TLS Keys Are Belong to Us: A Novel Approach to Live Memory Forensic Key Extraction |
DFRWS APAC 2025 |
|
Daniel Baier, Martin Lambertz |
| Advanced Forensic Recovery of Deleted File Data in F2FS |
DFRWS APAC 2025 |
|
Junghoon Oh, Hyunuk Hwang |
| From Sync to Seizure: A Binary Instrumentation-based Evaluation of the iCloud Backup Process |
DFRWS APAC 2025 |
|
Julian Geus, Jan Gruber, Jonas Wozar, Felix Freiling |
| Media Source Similarity Hashing (MSSH): A Practical Method for Large-Scale Media Investigations |
DFRWS APAC 2025 |
|
Samantha Klier, Harald Baier |
| DEF-IPV:A Digital Evidence Framework for Intimate Partner Violence Victims |
DFRWS APAC 2025 |
|
Kyungsuk Cho, Kyuyeon Choi, Yunji Park, Minsoo Kim, Seoyoung Kim, Doowon Jeong |
| A Study on the Recovery of Damaged iPhone Hardware Exhibiting Panic Full Phenomena |
DFRWS APAC 2025 |
|
Sunbum Song, Hongseok Yang, Eunji Lee, Sangeun Lee, Gibum Kim |
| DF-Graph: Structured and Explainable Analysis of Communication Data for Digital Forensics |
DFRWS APAC 2025 |
|
Jeongin Lee, Chaejin Lim, Beomjin Jin, Moohong Min, Hyoungshick Kim |
| Towards a standardized methodology and dataset for evaluating LLM-based digital forensic timeline analysis |
DFRWS APAC 2025 |
|
Hudan Studiawan, Frank Breitinger, Mark Scanlon |
| Dial M for Mixer: A Methodological Approach to Forensic Analysis of Unknown Devices Using the Thermomix TM6 |
DFRWS APAC 2025 |
|
Maximilian Eichhorn, Felix Freiling |
| Data Hiding in File Systems: Current State, Novel Methods, and a Standardized Corpus |
DFRWS APAC 2025 |
|
Anton Schwietert, Jan-Niclas Hilgert |
| Automatically generating digital forensic reference data triggered by mobile application updates |
DFRWS APAC 2025 |
|
Angelina A. Claij-Swart, Erik Oudsen, Bouke Timbermont, Christopher Hargreaves, Lena L. Voigt |
| Creating a Standardized Corpus for Digital Stratigraphic Methods with fsstratify |
DFRWS APAC 2025 |
|
Julian Uthoff, Lisa Marie Dreier, Martin Lambertz, Mariia Rybalka, Felix Freiling |
| LangurTrace: Forensic analysis of local LLM applications |
DFRWS APAC 2025 |
|
Sungjo Jeong, Sangjin Lee, Jungheum Park |
| Advanced Monero Wallet Forensics: Demystifying Off-Chain Artifacts to Trace Privacy-Preserving Cryptocurrency Transactions |
DFRWS APAC 2025 |
|
Jeongin Lee, Geunyeong Choi, Jihyo Han, Jungheum Park |
| Workshop: Applied Memory Forensics: Extracting and Analyzing Malware in Incident Response |
DFRWS APAC 2025 |
|
Ricardo J. Rodríguez |
| Workshop: Chain of Infection Detection: A Hands-On Workshop on Forensic Timeline Analysis |
DFRWS APAC 2025 |
|
Gaurav Gogia |
| Workshop: Practical macOS DFIR |
DFRWS APAC 2025 |
|
Bhargav Rathod |
| Workshop: Hands-On Elasticsearch for Digital Forensics: Learning from Windows eBPF Logs |
DFRWS APAC 2025 |
|
Philgeun Jin and Namjun Kim |
| Workshop: Forensic Procedures Under the Microscope — Improving Forensic Rigor with SOLVE-IT |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Eoghan Casey, Christopher Daywalt, Chris Hargreaves |
| Workshop: Empowering ICAC Investigators and Digital Forensics Examiners: Leveraging Free and Emerging Tools in Digital Forensics to Find and Rescue Children from Sexual Exploitation |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Cory Hall, Jeremy Girard, Jeff Rutherford |
| Workshop: Modern Memory Forensics with Volatility 3 |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Andrew Case, Hala Ali |
| Workshop: Kubernetes Security — Hands-On Attack and Defense |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Lenin Alevski |
| Workshop: From Narrow AI to Generative AI: Integrating AI in Your Daily DFIR Life |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Jess Garcia |
| Workshop: Adapting to evolving threats and strengthening security with Purple Teams |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Natalia Ciapponi, Maristela Ames |
| Improved Bitcoin simulation model and address heuristic method |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Yanan Gong, Kam Pui Chow, Siu Ming Yiu |
| Out of Control: Igniting SCADA Investigations with an HMI Forensics Framework and the Ignition Forensics Artifact Carving Tool (IFACT) |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Lasean Salmon, Ibrahim Baggili |
| Forensic recovery via Chip-Transplantation in Samsung Smartphones |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Sunbum Song, Gibum Kim, Hongseok Yang, Eunji Lee, Sangeun Lee |
| Enhancing DFIR in Orchestration Environments: Real-time Forensic Framework with eBPF for Windows |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Philgeun Jin, Namjun Kim, Doowon Jeong |
| An Extensible and Scalable System for Hash Lookup and Approximate Similarity Search with Similarity Digest Algorithms |
DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary |
|
Daniel Huici, Ricardo J. Rodríguez, Eduardo Mena |