@inproceedings{, author = {Göbel, Thomas; Baier, Harald; Wolf, Dennis}, title = {Scenario-based Data Set Generation for Use in Digital Forensics: A Case Study : 4. International Workshop on Digital Forensics (IWDF4)}, editor = {Gesellschaft für Informatik e.V.}, booktitle = {INFORMATIK 2024 : Lock in or log out? Wie digitale Souveränität gelingt}, series = {GI-Edition Lecture Notes in Informatics (LNI)}, journal = {}, address = {Bonn ; Berlin}, publisher = {Gesellschaft für Informatik}, edition = {}, year = {2024}, isbn = {978-3-88579-746-3}, volume = {P352}, number = {}, pages = {355-370}, url = {}, doi = {10.18420/inf2024_25}, keywords = {Digital forensic data set ; Digital corpora ; Synthetic data ; Ground truth data ; Labeled data set ; Data set generation ; Data set creation ; Data synthesis framework ; ForTrace}, abstract = {Digital forensics is a rapidly growing and highly relevant field of cybersecurity. In case of an incident, the subsequent digital forensic investigation and analysis shall reveal the respective digital evidence. However, although electronic devices and their data play a central role in each crime investigation, data sets to train experts or to validate tools are sparse. While manual data set generation is a time-consuming, elaborate and error-prone task, tool-based data synthesis is an excellent candidate for simplifying data generation and solving the data set gap problem. Synthetic data sets can be used, for example, to test and refine forensic tools and methods under controlled conditions. In addition, entirely new approaches can be explored. Several promising data synthesis frameworks for digital forensic data set creation have been published lately, the most recent of which is ForTrace, a freely available, community-driven data synthesis framework written in Python for generating digital forensic data sets. This paper shows how to apply ForTrace in a large-scale manner without human interaction. Our main goal is to show the usability of ForTrace and demonstrate its practicality and benefits for the digital forensic domain. We therefore provide a sample usage of ForTrace in two scenarios, namely a VeraCrypt and a malware use case, and present the definition of the corresponding configurations.}, note = {}, institution = {Universität der Bundeswehr München, Fakultät für Informatik, INF 6 - Institut für Systemsicherheit, Professur: Baier, Harald}, }