DigitalCorpora: Synthetic Digital Forensics Evidence for Research

DigitalCorpora provides disk images, memory dumps, and network packet captures for digital forensics research. The data is synthetic, created by students and faculty acting in persona, allowing use without prior authorization or IRB approval. This collection is hosted on AWS S3 and accessible via the digitalcorpora.org website.

Use Cases

• Developing and testing forensic analysis tools based on provided disk images.
• Training machine learning models for intrusion detection using synthetic network packet captures.
• Educating students on memory forensics techniques with provided memory dumps.
• Benchmarking information retrieval algorithms against structured forensic scenarios.

Strengths

• Data is explicitly synthetic, designed for research and education without requiring IRB approval.
• Collection includes multiple forensic data types: disk images, memory dumps, and network captures.
• Accessible via AWS S3 and a dedicated website, facilitating programmatic use.

Limitations

• Row count, file size, and last update date are unknown, limiting suitability assessment.
• Column-level documentation is absent; field semantics must be inferred after download.
• Data may reflect bias inherent to the specific academic scenarios performed.

Provenance

Source

Simson Garfinkel

Collection Method

Synthetic scenarios performed by students, faculty, and others acting in persona.

Time Range

null

Freshness

Last updated date is unknown; freshness unverified.

Geography

null