united kingdom

DC3 - Digital Forensics Challenge

Type: Team based (one to four players per team)
Player Count: 1000+

This Challenge is now closed.

Game closes 01/11/2012

All DC3 Digital Forensics Challenge solutions, including scripts and tools created by the player/team must be uploaded by no later than Thursday November 1st at 11:59:59pm EDT (Please note this is American time not UK time) to be eligible for a prize in their assigned category. Solutions received after this time will not be scored.


Register both here and in the US for the UK strand of this challenge.

The DC3 Digital Forensics Challenge 2012/13 is a global challenge designed and hosted by the US Department of Defence Cyber Crime Center (www.dc3.mil/challenge/2012/). Players from all over the world register and compete against each other in what is considered one of the most difficult forensic challenges in the world. In order to qualify to compete in the UK strand of this competition, you must fulfil the Challenge eligibility criteria (see registration process for detail but: British, resident in the UK and not already working in cyber security) and register both with the DC3 site and with ourselves. The best competitor in the UK strand will win a major prize from our £100k portfolio.  This year’s winner won a 7Safe training course worth up to £2,000.  The top candidates will also be eligible to compete in the Challenge Face-to-Face competition, with an opportunity to win further prizes.

If you are not eligible for the UK strand of this competition and our prize, you can still enter DC3’s competition and this year we will invite the UK winner from a cyber-security professional category to our Awards lunch to celebrate their success here in the UK as well as at the US grand ceremony.

The DC3 Digital Forensics Challenge 2012 is based on individual scenario-based, progressive level challenges as a call to the digital forensics community to pioneer new investigative tools, techniques and methodologies.

Each challenge level establishes the total number of points available per challenge assigned based on its difficulty toward a solution (known to unknown). This is based on the complexity of what a digital forensics examiner normally runs into and has to adjust for/extract/scrutinize in an analysis of those file types for examination problems.

Level 100: Novice: Groundwork- these challenges have a solution that are well known to experienced examiners. Each subcategory is worth 100 points (e.g. File Signatures, Suspicious Software, Hashing Metadata, etc.).

Level 200: Advanced: Uncertainty- at 200 points per subcategory, these solvable challenges have a varying degree of difficulty (e.g. Data Hiding, File Headers, Passwords, Registry, etc.).

Level 300: Expert: Investigate- there is no guarantee that these challenges have a solution. Additionally, each 300 point challenge requires a solution that is not very well known (e.g. Encryption, Parsing, etc.).

Level 400: Master: Reveal- these 400 point challenges have no known solution (e.g. Communication Recovery/Parsing, Information Concealment in files, etc.).

Level 500: Developer: Originate- 500 point challenges required development of digital forensic tools based on the defined requirements (e.g. tools, methodologies, etc. for known Digital Forensic investigation issues).

This registration is for Round 1 of the "Investigate & Understand" Stream. Successful candidates from this stream of activity will qualify for entry to the Sophos Face to Face Stream Final, details of which can be found here. details of which can be found here