Press Release - DFRWS Announces IoT Forensic Challenge Grand Prize Winners

Each year the DFRWS creates a forensic challenge - an international competition to encourage development in needed areas of digital forensics. In 2017 and 2018, DFRWS Forensic Challenges concentrate on Internet of Things (IoT). In particular, how can traces from IoT devices be useful for investigations of violent crimes such as an assault  murder?

This year’s grand prize was awarded to the SPAWAR Systems Center ATLANTIC Team: Mark Gramajo, Joshua Lewis, Randall Sharo, Shawn Zwach.

This team not only analyzed available digital traces to reconstruct the scenario, but also developed open source plugins for the plaso forensic framework, provided a script to parse the Google OnHub diagnostic report, loaded results into Elastic and Kibana for correlation and analysis, and uncovered IoT traces within network traffic.


DFRWS IoT Forensic Challenge

Each year the DFRWS creates an international competition to encourage development in needed areas of digital forensics. This year the challenge concentrated on Internet-of-Things as a source of evidence (see This scenario involves digital traces from Samsung Note 2 devices, Google OnHub, Amazon Echo, Smart TV Raspberry Pi, and associated network traffic. This challenge scenario and datasets were implemented by Joshua Jmes, Digital Forensic Investigation Research Laboratory at Hallym University.


IoT Forensic Challenge Results

The materials for the winning submission and other competitors are available here:




DFRWS Statement on U.S. Presidential Executive Order 13780

DFRWS supports an international community of researchers, developers, and practitioners with a legitimate interest in digital forensic research.


The U.S. Presidential Executive Order 13780 titled “Protecting The Nation From Foreign Terrorist Entry Into The United States” could prevent legitimate members of the digital forensic community from attending the DFRWS Conference in the United States.


To continue supporting collaboration between members of our community throughout the world, the DFRWS will make every effort to arrange alternate ways to participate (e.g., video conference, presenting at the DFRWS EU).



Executive Order 13780 - Protecting The Nation From Foreign Terrorist Entry Into The United States (March 6, 2017)




Press Release - DFRWS USA 2017 (Austin TX)

Keynote speeches by Kara Nance and Brian Hay at the DFRWS Conference in Austin on August 7-8, 2017.


DFRWS USA 2017 Keynotes

Kara Nance, Professor of Computer Science at the University of Alaska Fairbanks and the founder of Security Works, will deliver her keynote “Visualizing Forensic Datasets to Develop Mitigation Strategies”


Brian Hay, General Manager at Cyber Security and former Detective Superintendent of QLD Police, will deliver his keynote “Digital Forensics When Everything is Virtual”


DFRWS USA 2017 Conference:


DFRWS USA 2017 Conference

The DFRWS Conference, organized by the DFRWS, will take place from August 6-9, 2017, at the Hilton Austin Hotel in Austin, Texas. The conference will cover areas such as big data approaches to forensics for data collection and data mining; large scale visualization addressing forensic challenges of systems-on-a-chip anti-forensics; anti-anti-forensics, bridging the gap between analog; and digital traces/evidences/investigators case studies and trend reports on data hiding and discovery.