Back to directory

SOLVE-IT

A knowledge base of digital forensics investigation techniques, modeled on MITRE ATT&CK, cataloging each technique's objective, ways it can go wrong and mitigations for those weaknesses.

SOLVE-IT

SOLVE-IT structures digital forensics knowledge around four linked concepts: an objective, the goal an investigator wants to achieve such as acquiring data; a technique, a specific way to achieve that objective such as creating a disk image; a weakness, a potential problem that can arise from using a technique, classified using the ASTM E3016-18 error-mitigation standard; and a mitigation, something that can be done to avoid or reduce a weakness's impact.

Each technique, weakness and mitigation is stored as a directly viewable JSON file under the data directory, with Python utilities for working with the knowledge base programmatically and scripts for generating Markdown reports from it; a hosted explorer and a machine-readable data export are also provided for browsing without cloning the repository.

It is written in Python, community-maintained, and licensed under MIT.

More in Security

See all 287
  • The Standup

    standup.thecompound.tech

    A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • Compliance Posture

    complianceposture.com

    A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.