SADFE is one of the oldest venues for dissemination of Digital Forensics research. Founded in 2005, SADFE is an international conference that has moved around the world. SADFE’s engineering flare encourages authors to address foundational issues of digital investigations, custody and other rules of evidence, computer-human interaction, international law, and other matters that are relevant to collecting, storing, and presenting network and other electronically processed data and information.

Today's cyber investigation faces many difficult challenges. In the 2001 US v. Gorshkov case, the hackers employed a wide array of distributed Perl scripts that transcend across national boundaries to trigger massive amount of coordinated online auctions, email confirmations, and other fake transactions to accomplish fraudulent electronic fund transfers on numerous stolen credit card records.

Under such a reality, the foremost daunting challenge is the discovery and collection of voluminous and often globally distributed digital evidences. At the same time, increasing sophistication of modern cyber crimes further adds to the difficulty of correlating and piecing together physical and digital evidence for scenario reconstruction. Additionally, both legal and technical teams must work closely together to build a court-admissible case toward eventual conviction. This frequently implies that the strategy and the direction of the investigation may not be entirely technically driven at times. Issues such as privacy, admissibility and international laws often require careful consideration.

SADFE is intended to further the advancement of computer forensic engineering by promoting innovative & leading-edge systematic approaches to cyber crime investigation. The workshop brings together top digital forensic researchers, advanced tool/product builders, and expert law enforcement from around the world for information exchange and R&D collaboration.