Digital Forensics Association

Evidence Files

• Digital Corpora Scenarios
  Scenarios are collections of multiple disk images, memory dumps, network traffic, and/or data from portable devices. These scenarios are created to simulate the experience of performing a real digital forensics case.
• Digital Corpora Evidence Files
  These include evidence files from various sources that do not have the accompanying fully fleshed scenario that the above links have.
• The CFReDS Project
  NIST is developing Computer Forensic Reference Data Sets (CFReDS) for digital evidence.
• Digital Forensics Tool Testing Images
  Testing in the public view is an important part of increasing confidence in software and hardware tools.
• Enron Email Dataset
  Enron e-mail messages and attachments in two sets of downloadable compressed files: XML and PST.
• HogFly's Memory Dumps
  From the Forensic Incident Response Blog, and the link is to his skydrive containing the images.
• The Law Enforcement and Forensic Examiner's Introduction to Linux
  Great resource for practicing your Linux forensic skills.
• Wireshark Sample Captures Wiki
  Network packet captures for analysis.
• Wireshark Network Analysis Book Images
  These are used in the above book.