AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Tool Testing

Below are links to sites that host forensic images of computers, phones, and various other storage media that can be used for tool validation purposes. As always, if you know of a link that’s missing here, please submit it using this link!

When it comes to mounting forensic images, Arsenal Recon’s Arsenal Image Mounter is widely considered to be the best tool for these purposes. 

ResourceUpdatedCreator
DFIRArtifactMuseum2022DFIRArtifactMuseum - GitHub
Computer Forensic Reference DataSet Portal2022National Institute of Standards and Technology
iOS 14.22021Josh Hickman
iOS 14.32021Josh Hickman
macOS - Big Sur2021Josh Hickman
Android 102020Josh Hickman
Android 112020Josh Hickman
iOS 13.3.12020Josh Hickman
iOS 13.4.12020Josh Hickman
IoT Images2020 R. Jean Costello
Memory Images2020Alissa Torres
SQLite2020Digital Corpora
Android 12 Image Creation2020Josh Hickman
DCFL Control Standard v1.02020J Lyle
Android 72019Josh Hickman
Android 82019Josh Hickman
Android 92019Josh Hickman
DigitalCorpora (Cell Phones, Disk Images, Files, Network Packet Dumps, Scenarios)2019
Android 11 Image w/ Documentation2019Josh Hickman
Volatility Memory Image Samples2019Volatility
Mobile Device Images - Cellebrite UFED & Physical Analyzer2017J Lyle
Digital Forensics Tool Testing Images2010Brian Carrier
Basic Mac Image2009NIST
Memory Images2004Jesse Kornblum
Container FilesJ Lyle
Forensic Images for File CarvingJ Lyle
Forensic Images for File CarvingJ Lyle
Linux Training MaterialsHal Pomeranz
Memory ImagesVarious
Mobile Device Images - Guidance Software NeutrinoJ Lyle
Mobile Device Images - MSAB XRYJ Lyle
Mobile Device Images - NISTNIST
Mobile Device Images - Paraben Device SeizureJ Lyle
Mobile Device Images - Susteen Secure ViewJ Lyle