hemu1438/forensicsgpt-training-data huggingface dataset:
nps-2010-emails – Digital Corpora
2010-nps-emails is a test disk that can be used for testing programs that find email addresses or perform string search.
The disk image consists of 30 different email addresses, each one stored in a different document with a different coding scheme.
Below are a list of the email addresses and their codings:
email address                             Application (Encoding)

plain_text@textedit.com                   Apple TextEdit  (UTF-8)
plain_text_pdf@textedit.com               Apple TextEdit print-to-PDF (/FlateDecode)
rtf_text@textedit.com                     Apple TextEdit (RTF)
rtf_text_pdf@textedit.com                 Apple TextEdit print-to-PDF (/FlateDecode)
plain_utf16@textedit.com                  Apple TextEdit (UTF-16)
plain_utf16_pdf@textedit.com              Apple TextEdit print-to-PDF (/FlateDecode)

pages@iwork09.com                         Apple Pages '09
pages_comment@iwork09.com                 Apple Pages (comment) '09
keynote@iwork09.com                       Apple Keynote '09
keynote_comment@iwork09.com               Apple Keynote '09 (comment)
numbers@iwork09.com                       Apple Numbers '09
numbers_comment@iwork09.com               Apple Numbers '09 (comment)

user_doc@microsoftword.com                Microsoft Word 2008 (Mac) (.doc file)
user_doc_pdf@microsoftword.com            Microsoft Word 2008 (Mac) print-to-PDF
user_docx@microsoftword.com
user_docx_pdf@microsoftword.com           Microsoft Word 2008 (Mac) print-to-PDF (.docx file)
xls_cell@microsoft_excel.com
xls_comment@microsoft_excel.com           Microsoft Word 2008 (Mac)
xlsx_cell@microsoft_excel.com             Microsoft Word 2008 (Mac)
xlsx_cell_comment@microsoft_excel.com     Microsoft Word 2008 (Mac) (Comment)

doc_within_doc@document.com               Microsoft Word 2007 (OLE .doc file within .doc)
docx_within_docx@document.com             Microsoft Word 2007 (OLE .doc file within .doc)
ppt_within_doc@document.com               Microsoft PowerPoint and Word 2007 (OLE .ppt file within .doc)
pptx_within_docx@document.com             Microsoft PowerPoint and Word 2007 (OLE .pptx file within .docx)
xls_within_doc@document.com               Microsoft Excel and Word 2007 (OLE .xls file within .doc)
xlsx_within_docx@document.com             Microsoft Excel and Word 2007 (OLE .xlsx file within .docx)

email_in_zip@zipfile1.com                 text file within ZIP
email_in_zip_zip@zipfile2.com             ZIP'ed text file, ZIP'ed
email_in_gzip@gzipfile.com                text file within GZIP
email_in_gzip_gzip@gzipfile.com           GZIP'ed text file, GZIP'ed
The image can be downloaded from https://downloads.digitalcorpora.org/corpora/drives/nps-2010-emails/
Format Conversion – Digital Corpora
This page provides information on converting from one format to another.
Disk Images
Disk images may be distributed in Raw (dd), EnCase/Expert Witness (E01), or Advanced Forensics Format (AFF) formats.
To convert from EnCase to Raw format, use the ewfexport command (part of the libewf package):
$ ewfexport filename.E01
If filename is a multi-volume EnCase file, you may need to specify all of the files on the command line, e.g.:
$ ewfexport filename.E??
On windows, you may need to specify all of the file names:
$ ewfexport filename.E01 filename.E02 filename.E03 …
To convert an AFF file to Raw format, use the afconvert command (part of the AFFLIB library):
$ afconvert -e raw filename.aff
Real Data Corpus – Digital Corpora
The Real Data Corpus (RDC) was a collection of raw data extracted from data-carrying devices that were purchased on the secondary market around the world. Many studies between 1995 and 2005 shown that hard drives, cell phones, USB memory sticks, and other data-carrying devices are frequently discarded by their original users without the data first being cleared or purged. By purchasing these devices and extracting their data, we created a data set that closely mimics data as it is found in the real world.
Potential Uses
The Real Data Corpus was a one-of-a-kind scientific resource for:
Developing and validating forensic and data recovery tools.
Training students in forensics and data recovery
Developing and validating document translation software.
Exploring and characterizing real-world computing practices, configuration choices, and option settings.
Studying the storage allocation strategies of file systems under real-world conditions
Current Contents
As of February 21, 2011, the Non-US Person’s Corpus consisted of the following:
1,289 hard drive images ranging in size from 500MB to 80GB.
643 flash memory images (USB, Sony Memory Stick, SD and other), ranging from 128MB to 4GB.
98 CDROMs
For a total of 70TB of data (uncompressed).
Access and Availability
Real Data Corpus is no longer available.
Historical Contents
Corpus Hard Drives Flash Drives Optical GB (Total Uncompressed) 
BA	7			38	
CA	73	1		1,064	
CE	1			82	
CH	2			5	
CN	143	568	98	3,627	
DE	36	1		755	
GR	13			27	
IL	229	4		2,226	
IN	487	66		26,512	
MX	175			1,110	
NZ	1			4	
PS	98			957	
TH	1	3		13	
UA	23			565	
Total	1,289	643	98	36,990