NIST logo

Digital Evidence

Digital evidence includes information on computers, audio files, video recordings, and digital images. This evidence is essential in computer and Internet crimes, but is also valuable for facial recognition, crime scene photos, and surveillance tapes.

  • Audio Evidence
  • Computer/Internet Crimes
  • Image Analysis
  • Video Analysis

Specific Projects

Computer Forensic Reference Data Sets
As computer crimes increase and continue to overwhelm crime laboratories, managers need a quick and assured way to validate an examiner’s experience and their equipment’s functionality. We are currently developing an online resource for computer forensic analysts and managers to obtain mock case examples for in-house evaluation of examiners’ skills or equipment calibration. The data sets collected to date are available on the Computer Forensic Reference Data Sets page.

Computer Forensics Tool Testing

Many software and hardware packages available today offer forensic capabilities. Before these claims can be trusted by forensic scientists and the courts, however, the tools must be tested to ensure that they can support the collection, examination, analysis, and court testimony of digital evidence. We have conducted functionality tests on specific software and hardware products using a unique testing framework. The results of these tests are available on the Computer Forensics Tool Testing project website.

National Software Reference Library

When evaluating computer evidence after a crime, forensic scientists can be faced with a large number of files on multiple hard drives. To assist these examiners, we have evaluated software programs that can quickly analyze the files and select the ones most forensically relevant. To access these evaluations, please visit the National Software Reference Library.

Real-Time Forensics Imaging for Analog and Digital Video Tapes
Forensic scientists need to be able to identify when video recordings have been tampered with—erased, recorded over, or otherwise modified—just like they can recognize when audio recordings have been tampered with. To help provide the tools necessary to do this, we are developing a high-resolution imaging system that uses nano-engineered magnetic imaging methods for screening and recovering data from media that is damaged or was tampered with. This technology will be available after testing is complete.