The paper introduces DFIR-Metric, a three-part benchmark for evaluating LLMs in digital forensics, and finds that leading models master certification-style knowledge but fail practical forensic task completion.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
DFIR-Metric: A Benchmark Dataset for Evaluating Large Language Models in Digital Forensics and Incident Response
The paper introduces DFIR-Metric, a three-part benchmark for evaluating LLMs in digital forensics, and finds that leading models master certification-style knowledge but fail practical forensic task completion.