| Paper | Presentation | Conference | Downloads | Author |
|---|---|---|---|
| Creating a Standardized Corpus for Digital Stratigraphic Methods with fsstratify | DFRWS APAC 2025 | Julian Uthoff, Lisa Marie Dreier, Martin Lambertz, Mariia Rybalka, Felix Freiling | |
| LangurTrace: Forensic analysis of local LLM applications | DFRWS APAC 2025 | Sungjo Jeong, Sangjin Lee, Jungheum Park | |
| Advanced Monero Wallet Forensics: Demystifying Off-Chain Artifacts to Trace Privacy-Preserving Cryptocurrency Transactions | DFRWS APAC 2025 | Jeongin Lee, Geunyeong Choi, Jihyo Han, Jungheum Park | |
| Workshop: Applied Memory Forensics: Extracting and Analyzing Malware in Incident Response | DFRWS APAC 2025 | Ricardo J. Rodríguez | |
| Workshop: Chain of Infection Detection: A Hands-On Workshop on Forensic Timeline Analysis | DFRWS APAC 2025 | Gaurav Gogia | |
| Workshop: Practical macOS DFIR | DFRWS APAC 2025 | Bhargav Rathod | |
| Workshop: Hands-On Elasticsearch for Digital Forensics: Learning from Windows eBPF Logs | DFRWS APAC 2025 | Philgeun Jin and Namjun Kim | |
| Workshop: Forensic Procedures Under the Microscope — Improving Forensic Rigor with SOLVE-IT | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Eoghan Casey, Christopher Daywalt, Chris Hargreaves | |
| Workshop: Empowering ICAC Investigators and Digital Forensics Examiners: Leveraging Free and Emerging Tools in Digital Forensics to Find and Rescue Children from Sexual Exploitation | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Cory Hall, Jeremy Girard, Jeff Rutherford | |
| Workshop: Modern Memory Forensics with Volatility 3 | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Andrew Case, Hala Ali | |
| Workshop: Kubernetes Security — Hands-On Attack and Defense | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Lenin Alevski | |
| Workshop: From Narrow AI to Generative AI: Integrating AI in Your Daily DFIR Life | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Jess Garcia | |
| Workshop: Adapting to evolving threats and strengthening security with Purple Teams | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Natalia Ciapponi, Maristela Ames | |
| Improved Bitcoin simulation model and address heuristic method | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Yanan Gong, Kam Pui Chow, Siu Ming Yiu | |
| Out of Control: Igniting SCADA Investigations with an HMI Forensics Framework and the Ignition Forensics Artifact Carving Tool (IFACT) | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Lasean Salmon, Ibrahim Baggili | |
| Forensic recovery via Chip-Transplantation in Samsung Smartphones | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Sunbum Song, Gibum Kim, Hongseok Yang, Eunji Lee, Sangeun Lee | |
| Enhancing DFIR in Orchestration Environments: Real-time Forensic Framework with eBPF for Windows | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Philgeun Jin, Namjun Kim, Doowon Jeong | |
| An Extensible and Scalable System for Hash Lookup and Approximate Similarity Search with Similarity Digest Algorithms | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Daniel Huici, Ricardo J. Rodríguez, Eduardo Mena | |
| Bytewise Approximate Matching: Evaluating Common Scenarios for Executable Files | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Carlo Jakobs, Axel Mahr, Martin Lambertz, Mariia Rybalka, Daniel Plohmann | |
| If At First You Don’t Succeed, Trie, Trie Again: Correcting TLSH Scalability Claims for Large-Dataset Malware Forensics | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Jordi Gonzalez | |
| Uncovering Linux Desktop Espionage | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Lukas Schmidt, Sebastian Strasda, Sebastian Schinzel | |
| ANOC: Automated NoSQL Database Carver | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Mahfuzul I. Nissan, James Wagner, Alexander Rasin | |
| Exploiting Database Storage for Data Exfiltration | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | James Wagner, Alexander Rasin, Vassil Roussev | |
| SoK: Timeline based event reconstruction for digital forensics: Terminology, methodology, and current challenges | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Frank Breitinger, Hudan Studiawan, Chris Hargreaves | |
| Your Forensic AI-Asisstant, SERENA: Systematic Extraction and Reconstruction for ENhanced A2P Forensics | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Jieon Kim, Byeongchan Jeong, Jungheum Park, Seungeun Park, Sangjin Lee | |
| Bridging Knowledge Gaps in Digital Forensics using Unsupervised Explainable AI | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Zainab Khalid, Farkhund Iqbal, Mohd Saqib | |
| Leveraging Memory Forensics to Investigate and Detect Illegal 3D Printing Activities | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Hala Ali, Andrew Case, Irfan Ahmed | |
| Detecting Hidden Kernel Modules in Memory Snapshots | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Roland Nagy | |
| Memory Analysis of the Python Runtime Environment | DFRWS USA 2025 -- "History in the Making" -- Jubilee 25th Anniversary | Hala Ali, Andrew Case, Irfan Ahmed | |
| Modeling uncertainty factors in digital forensic science | DFRWS EU 2025 | Elénore Ryser | |
| System Bias in the Interorganisational Environment of Digital Forensics | DFRWS EU 2025 | Laura Vom Kolke, Nina Sunde and Brita Bjørkelo | |
| Secrets in Motion: Dynamic TLS Key Recovery | DFRWS EU 2025 | Daniel Baier and Martin Lambertz | |
| Mobint – an advanced platform supporting integration and analysis of mobile data coming from various sources | DFRWS EU 2025 | Kamil Piętak, Jacek Dajda and Marek Kisiel-Dorohinicki | |
| A discussion of sources and quality/reliability of events for timelines | DFRWS EU 2023 | Céline Vanini, Frank Breitinger and Christopher Hargreaves | |
| Tumbling Down the Stairs: Exploiting a Tumbler’s Attempt to Hide with Ordinary-looking Transactions using Wallet Fingerprinting | DFRWS EU 2025 | Jan Zavřel, Michal Koutenský, Daniel Dolejška, Vladimír Veselý | |
| Unmixing the mix: Patterns and challenges in Bitcoin mixer investigations | DFRWS EU 2025 | Pascal Tippe, Christoph Deckers | |
| Deep Reasoning and Large Context Windows: Next-Generation AI in Digital Forensic Investigations | DFRWS EU 2025 | Hans Henseler, Timo Mecon | |
| Beyond Hamming Distance: Exploring Spatial Encoding in Perceptual Hashes | DFRWS EU 2025 | Sean McKeown | |
| When is Logging Sufficient? — Tracking event causality for improved forensic analysis and correlation | DFRWS EU 2025 | Johannes Olegård, Stefan Axelsson and Yuhong Li | |
| Samsung Tracking Tag Application Forensics in Criminal Investigations | DFRWS EU 2025 | Hongseok Yang, Gibum Kim, Sanghyug Han and Mindong Kim | |
| Video Capturing Device Identification through Block-based PRNU Matching | DFRWS EU 2025 | Jian Li, Fei Wang, Bin Ma, Chunpeng Wang and Xiaoming Wu | |
| Tapping .IPAs: An Automated Analysis of iPhone Applications Using Apple Silicon Macs | DFRWS EU 2025 | Steven Seiden, Andrew Webb and Ibrahim Baggili | |
| Forensic analysis of Telegram Messenger on iOS Smartphones | DFRWS EU 2025 | Lukas Jaeckel, Michael Spranger and Dirk Labudde | |
| ForensicLLM: A Local Large Language Model for Digital Forensics | DFRWS EU 2025 | Binaya Sharma, James Ghawaly, Kyle McCleary, Andrew Webb and Ibrahim Baggili | |
| PaSSw0rdVib3s!: AI-assisted Password Recognition for Digital Forensic Investigations | DFRWS EU 2025 | Romke van Dijk, Judith van de Wetering, Ranieri Argentini, Leonie Gorka, Anne Fleur van Luenen, Sieds Minnema, Edwin Rijgersberg, Mattijs Ugen, Zoltan Mann and Zeno Geradts | |
| Beyond the Dictionary Attack: Enhancing Password Cracking Efficiency through Machine Learning-Induced Mangling Rules | DFRWS EU 2025 | Radek Hranický, Lucia Šírová and Viktor Rucký | |
| SOLVE-IT: A proposed digital forensic knowledge base inspired by MITRE ATT&CK | DFRWS EU 2025 | Christopher Hargreaves, Harm van Beek and Eoghan Casey | |
| Preserving Meaning of Evidence from Evolving Systems | DFRWS EU 2025 | Hannes Spichiger and Frank Adelstein | |
| A Metrics-Based Look at Disk Images: Insights and Applications | DFRWS EU 2025 | Lena Lucia Voigt, Felix Freiling and Chris Hargreaves | |
| A Scenario-Based Quality Assessment of Memory Acquisition Tools and its Investigative Implications | DFRWS EU 2025 | Lisa Rzepka, Jenny Ottmann, Radina Stoykova, Felix Freiling and Harald Baier |