Platform Independent

Showing 1 to 11 of 11 results

Magnet User Summit CTF 2019

Magnet User Summit CTF 2019

Forensic Test Images
 Windows, Android, and Google Takeout evidence from the 2019 Magnet User Summit CTF for hands-on DFIR practice. 
OS Version
Host
Magnet Virtual Summit 2021 CTF

Magnet Virtual Summit 2021 CTF

Forensic Test Images
 iOS, macOS, Chromebook, and Google Takeout evidence from the 2021 Magnet Virtual Summit CTF for hands-on DFIR practice. 
OS Version
Host
Magnet Virtual Summit 2024 CTF

Magnet Virtual Summit 2024 CTF

Forensic Test Images
Forensic evidence from the 2024 Magnet Virtual Summit CTF, including iOS, Android, Discord, and Facebook data for hands-on DFIR practice. 
OS Version
Host
Magnet Virtual Summit 2025 CTF

Magnet Virtual Summit 2025 CTF

Forensic Test Images
Forensic evidence from the 2025 Magnet Virtual Summit CTF covering iOS, Android, Windows, ChromeOS, and cloud data for hands-on DFIR practice. 
OS Version
Host
Magnet Forensics Capture the Flag (CTF) Images

Magnet Forensics Capture the Flag (CTF) Images

Forensic Test Images
 Collection of digital forensic evidence created for Magnet Forensics Capture the Flag events beginning in 2018. The datasets span computer, mobile, c...
Host
Lost in Hyperspace – EBR Loop

Lost in Hyperspace – EBR Loop

Forensic Test Images
CIRCL CyberDay 2020 forensic disk exercise involving manipulated Extended Boot Records that create an abnormal chain of logical partitions. The image...
Host
My Name is Legion – Polyglot Boot Record

My Name is Legion – Polyglot Boot Record

Forensic Test Images
 CIRCL CyberDay 2020 forensic exercise demonstrating a specially manipulated disk structure that functions as both a Master Boot Record and an NTFS Vo...
Host
Resident Data on NTFS File Systems – CyberDay 2023

Resident Data on NTFS File Systems – CyberDay 2023

Forensic Test Images
CIRCL training exercise for examining how NTFS resident data behaves as a file grows and changes over time. The package includes an empty NTFS disk im...
Host
AUSCERT2024 – As We Are Many: The Spooky USB Stick

AUSCERT2024 – As We Are Many: The Spooky USB Stick

Forensic Test Images
CIRCL forensic training package built around a specially constructed NTFS USB/disk image. The exercise covers partition tables, MBR and volume boot re...
Host
Bad out of Hell – Bad Cluster Forensics – FAT32

Bad out of Hell – Bad Cluster Forensics – FAT32

Forensic Test Images
Hands-on CIRCL forensic training exercise focused on FAT32 file-system analysis and recovery. The lab uses a 512 MiB raw disk image to examine FAT str...
Host
CIRCL Digital Forensic Training Materials

CIRCL Digital Forensic Training Materials

Forensic Test Images
CIRCL maintains a collection of digital forensic training materials and downloadable evidence images covering file systems, disk structures, data reco...
Host

Main Menu