Digital Corpora

We have a new teacher’s guide and solution for the 2008-Nitroba scenario, thanks to work done at UNSW Canberra by Ajoy Ghosh.

• Nitroba Harassment Lab Scenario
• Nitroba Harassment Lab scenarios with Solution (encrypted)

Due to changes at our hosting provider, request for solutions made between June 1, 2019 and August 1, 2019 may have been lost. If you made a request during this time and did not receive a response, please submit another one! We apologize for the inconvenience.

Thanks to Joshua Hickman at the Digital Evidence Section of the North Carolina Department of Justice, we now have three Andoird images available for download: Android 7, Android 8 and Android 9.

Our downloads server is operational again! Thanks to George Mason University for continuing to host this resource!

We are having problems with our download server! Files are not available until further notice.

The website has been transitioned to Dreamhost. The downloads remain at George Mason University and can be reached at http://downloads.digitalcorpora.org/corpora/ for the corpora and http://downloads.digitalcorpora.org/downloads/ for files.

We are happy to announce the contribution of four disk images of a non-deterministic USB drive. Read More.

UT San Antonio has kindly provided digitalcorpora with open source, publicly releasable samples of 32 file types. These are the samples that were used by Dr. Nicole Beebe to develop the Sceadan File Type Classifier.

Included file types are ASP, AVI, B64, B85, BZ2, CSS, DLL, ELF, EXE, EXT3, FAT, FLV, JAR, JB2, JS, M4A, MOV, MP3, MP4, NTFS, PST, RPM, RTF, Random, SWF, TXT, Tbird, URL, WAV, WMA, XLSX, ZIP. Each file type sample can be downloaded from the website:
* http://digitalcorpora.org/corp/nps/files/filetypes1/

Also included is a _README directory that includes a list of every file downloaded and a copyright statement for the files that are covered under copyright. You can access that directory at:
* http://digitalcorpora.org/corp/nps/files/filetypes1/_README/

This “FLETYPES1” corpus supplements the files in the GOVDOCS1 corpus.

Please let us know if you use these by including this citation in your paper:

“FILETYPES1 File type samples,” Beebe, Nicole, University of Texas, San Antonio, hosted at http://digitalcorpora.org/corp/nps/files/filetypes1/. 2014

The text file govdocs1-first512-first4096-docid.txt containing MD5 hashes of the first 512 bytes and first 4096 bytes of every file in the GOVDOCS1 corpus has been removed.  This file was provided to assist with research of block hashes.  We have since created the hashdb toolset which provides support for creating and working with hash block databases.  Please refer to  https://github.com/simsong/hashdb/wiki for downloading the code, continuing progress on this topic, and links to relevant papers including:

Distinct Sector Hashes for Target File Detection

A related masters thesis on this topic was completed at Naval Postgraduate School in 2012 and can be downloaded for additional reading:  http://simson.net/ref/2012/kmf_thesis.pdf

A malware scan of thegovdocs1 corpus is now available at http://digitalcorpora.org/corp/nps/files/govdocs1/MetascanClientLog_201306281214.txt