Challenge archive

45 past DFIR challenges with their evidence files and community write-ups, where public.

2026

Magnet Virtual Summit 2026 CTF (powered by Hexordia)

Magnet Forensics / Hexordia

MobileCiphers

Challenge page

2026

Malware Traffic Analysis exercises

Brad Duncan

NetworkPCAPMalware

Challenge page ⬇ PCAPs (each exercise)✎ Answers posted per exercise

2026

The DFIR Report — DFIR Labs Digital Forensics Challenge 2026

The DFIR Report

SIEMIntrusionWindows

Case now available to DFIR Labs subscribers (paid).

Challenge page

2025

BelkaCTF #7: Stranger Dfings

Belkasoft

WindowsDisk

Challenge page ⬇ Image download & rules ✎ Belkasoft (official)

2025

Magnet Virtual Summit 2025 CTF — Ciphers

Magnet Forensics / Hexordia

Ciphers

Challenge page ✎ Kevin Pagano

2024

BelkaCTF #6: Bogus Bill

Belkasoft

iOSMobile

Challenge page ✎ Belkasoft (official)

2024

Magnet Virtual Summit 2024 CTF — Android

Magnet Forensics

AndroidMobile

Challenge page ✎ Kevin Pagano ✎ Forensafe ✎ DFIR101

2024

Magnet Virtual Summit 2024 CTF — iOS

Magnet Forensics

iOSMobile

Challenge page ✎ Kevin Pagano ✎ Forensafe ✎ Doug Metz

2024

Magnet Virtual Summit 2024 CTF — Cipher

Magnet Forensics

Ciphers

Challenge page ✎ Kevin Pagano ✎ Forensafe ✎ Kairos Tay

2023

Cellebrite CTF 2023

Cellebrite

iOSAndroidMobile

Challenge page ✎ Kevin Pagano (Abe)✎ Kevin Pagano (Felix)✎ Forensafe (Sharon)

2023

Huntress CTF 2023

Huntress

MalwareForensicsVarious

Challenge page ✎ Doug Metz

2022

BelkaCTF #5: Party Girl—Missing

Belkasoft

WindowsDisk

Challenge page ✎ Belkasoft (official)

2022

Magnet Forensics CTF images 2018–2022 (Digital Corpora)

Magnet Forensics / Digital Corpora

WindowsAndroidiOSmacOSLinuxChromebook

Challenge page ⬇ Images (Digital Corpora)

2022

Cellebrite CTF 2022

Cellebrite

iOSAndroidWindows

Challenge page ⬇ Datasets (NIST CFReDS, linked by Cellebrite)✎ Cellebrite (official, 4 parts)✎ Kevin Pagano (Heisenberg Android)

2022

CyberDefenders — GrabThePhisher

CyberDefenders

PhishingWeb

Challenge page ✎ N00b_H@ck3r

2020

Magnet Virtual Summit 2020 CTF — iOS

Magnet Forensics

iOSMobile

Challenge page ⬇ Images (Google Drive)✎ Kevin Pagano

2020

Magnet Virtual Summit 2020 CTF — Memory

Magnet Forensics

MemoryWindows

Challenge page ⬇ Images (Google Drive)✎ Peter Stewart

2020

Magnet Virtual Summit 2020 CTF — Android & Egg Hunt

Magnet Forensics

AndroidMobile

Challenge page ⬇ Images (Google Drive)✎ DFIR_300 (Android)✎ DFIR_300 (Egg Hunt)

2020

13Cubed Mini Memory CTF

13Cubed (Richard Davis)

Memory

Challenge page ✎ Peter Stewart

2020

MemLabs (6 memory forensics labs)

Abhiram Kumar

Memory

Challenge page ⬇ Lab dumps (GitHub)

2020

InCTF Internationals 2020 — Investigation (memory)

team bi0s

Memory

Challenge page ⬇ Challenge files (GitHub)✎ Abhiram Kumar

2020

InCTF Internationals 2020 — LOGarithm

team bi0s

MemoryLogs

Challenge page ⬇ Challenge files (GitHub)✎ Abhiram Kumar

2020

InCTF Internationals 2020 — Lookout Foxy

team bi0s

DiskBrowser

Challenge page ⬇ Challenge files (GitHub)✎ B Nihith

2020

HackTM CTF Quals 2020 — Find My Pass

HackTM

Memory

Challenge page ✎ Abhiram Kumar

2020

HackTM CTF Quals 2020 — Strange PCAP

HackTM

NetworkPCAP

Challenge page ✎ bi0s

2020

Defenit CTF 2020 — USB 2

Defenit

WindowsRegistryAmcache

Challenge page ✎ Abhiram Kumar

2020

DF Challenge 2020 — I can't remember my password

KIISC (Korea)

Disk

Challenge page ✎ Forensicator

2019

DEF CON DFIR CTF 2019 (Champlain DFA)

Champlain College DFA

WindowsMemoryAndroidLinux

Challenge page ✎ Peter Stewart (memory)

2019

Google CTF 2019 — Home Computer

Google

NTFSDisk

Challenge page ✎ Cerberus

2019

SANS Holiday Hack Challenge 2019 (KringleCon 2)

SANS / Counter Hack

VariousLogs

Challenge page ✎ Zach

2019

Foxton Forensics Cyber Challenge — Nov 2019

Foxton Forensics

Browser

Challenge page ✎ Foxton (walkthrough)

2019

BSidesSF 2019 — goodluks3

BSidesSF

DiskMemoryLUKS

Challenge page ✎ TeamRocketIST

2019

Securinets Quals 2019 — Rare to Win

Securinets

Memory

Challenge page ✎ Jullle3

2019

CTFZone Quals 2019 — In the Shadows

BI.ZONE

NTFS

Challenge page ✎ OFFZONE

2019

Pwn2Win CTF 2019 — Cloud Admin

Epic Leet Team

Memory

Challenge page ✎ Khaled Nassar

2018

DFRWS 2018 Challenge — IoT

DFRWS

IoT

Challenge page ⬇ Evidence (GitHub)✎ Submissions

2018

NIST CFReDS — Hacking Case

NIST

WindowsDisk

Challenge page ⬇ Image (CFReDS)

2018

SANS Holiday Hack Challenge 2018 (KringleCon)

SANS / Counter Hack

Various

Challenge page ✎ Winning answers

2017

DFRWS 2017 Challenge — IoT

DFRWS

IoT

Challenge page ⬇ Evidence (GitHub)✎ Submissions

2015

NIST CFReDS — Data Leakage Case

NIST

WindowsInsider threat

Challenge page ⬇ Images (CFReDS)

2013

SANS DFIRCon 2013 APT Memory & Malware Challenge

SANS

MemoryMalware

Challenge page ✎ Rob Lee (solution)

2011

Ali Hadi DFIR Challenges #1–#7

Ali Hadi

WindowsLinux

Challenge page ⬇ Images (ashemery.com)✎ Joseph Moronwi (#1 Web Server)

2011

LMG Network Forensics Puzzle Contests

LMG Security

NetworkPCAP

Challenge page ⬇ PCAPs & puzzles ✎ Ann's Aurora finalists

2008

Lance Mueller Forensic Practical #1

Lance Mueller

DiskNetwork

Challenge page ✎ Lance Mueller (answers)

2007

DFRWS 2007 Challenge — File carving

DFRWS

File carving

Challenge page ⬇ Evidence (GitHub)✎ Submissions

Challenge archive

Magnet Virtual Summit 2026 CTF (powered by Hexordia)

Malware Traffic Analysis exercises

The DFIR Report — DFIR Labs Digital Forensics Challenge 2026

BelkaCTF #7: Stranger Dfings

Magnet Virtual Summit 2025 CTF — Ciphers

BelkaCTF #6: Bogus Bill

Magnet Virtual Summit 2024 CTF — Android

Magnet Virtual Summit 2024 CTF — iOS

Magnet Virtual Summit 2024 CTF — Cipher

Cellebrite CTF 2023

Huntress CTF 2023

BelkaCTF #5: Party Girl—Missing

Magnet Forensics CTF images 2018–2022 (Digital Corpora)

Cellebrite CTF 2022

CyberDefenders — GrabThePhisher

Magnet Virtual Summit 2020 CTF — iOS

Magnet Virtual Summit 2020 CTF — Memory

Magnet Virtual Summit 2020 CTF — Android & Egg Hunt

13Cubed Mini Memory CTF

MemLabs (6 memory forensics labs)

InCTF Internationals 2020 — Investigation (memory)

InCTF Internationals 2020 — LOGarithm

InCTF Internationals 2020 — Lookout Foxy

HackTM CTF Quals 2020 — Find My Pass

HackTM CTF Quals 2020 — Strange PCAP

Defenit CTF 2020 — USB 2

DF Challenge 2020 — I can't remember my password

DEF CON DFIR CTF 2019 (Champlain DFA)

Google CTF 2019 — Home Computer

SANS Holiday Hack Challenge 2019 (KringleCon 2)

Foxton Forensics Cyber Challenge — Nov 2019

BSidesSF 2019 — goodluks3

Securinets Quals 2019 — Rare to Win

CTFZone Quals 2019 — In the Shadows

Pwn2Win CTF 2019 — Cloud Admin

DFRWS 2018 Challenge — IoT

NIST CFReDS — Hacking Case

SANS Holiday Hack Challenge 2018 (KringleCon)

DFRWS 2017 Challenge — IoT

NIST CFReDS — Data Leakage Case

SANS DFIRCon 2013 APT Memory & Malware Challenge

Ali Hadi DFIR Challenges #1–#7

LMG Network Forensics Puzzle Contests

Lance Mueller Forensic Practical #1

DFRWS 2007 Challenge — File carving

Get the DFIR CTF digest