Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

CFReDS Current Data Sets

These are prototype data sets for public comment (JLYLE [at] NIST.GOV). Some test sets are multi-skill holistic cases, e.g., the hacking case while other test sets are focused on specific skills, e.g., non-English text searching in the Russian Tea Room case.
(NOTE: THESE DATA SETS ARE NOT FOR FEDERATED TESTING)
 

Data Set Description
Hacking Case Any names in the image are fictional and do no refer to real people.
Data Leakage Case Large, complex image involving intellectual property theft
Registry Forensics Data Set for testing MS Windows Registry Extraction Tools
Drone Images Images from 60 drones and associated controllers, connected mobile devices and computers
Russian Tea Room Unicode string search in Russian or English (Bigendian)
asb imageddE01 Unicode string search in Russian (UTF-8)
Create a reference drive Create a drive with known hash values. The creation process also verifies that the computer hardware and the drive are working as expected.
Basic Mac image Mac File Systems (HP OS Extended Journaling, HP OS Extended, HP OS Standard & Unix) 
Rhino Hunt Look for images (of a rhinoceros) in an image file and network traces. 
Memory Images Live memory capture images
DCFL DCFL Control image
Mobile Device Images Chip-off /JTAG binary images
Container Files String searching on container and nested container files
Deleted File Recovery Metadata based deleted file recovery images
File Carving Basic file carving images 
File Carving CFTT Images Images used for CFTT file carving test reports

 

Federated Testing Test Data Sets

(only use these data sets with Federated Testing) 
 

Data Set

Description

String Search, Version 1.1

String Search Test Data for use with Federated Testing 4.0 and later.

 

CFReDS Discontinued Data Sets

Created December 13, 2017, Updated October 7, 2019