What this project means by standards
The catalog uses “standards” as a navigation label for normative standards, technical specifications, and recognized guidance. Each entry names its responsible organization, purpose, and forensic relevance. A listing does not make guidance mandatory or establish compliance. Check the actual edition and applicability before using it.
Digital-evidence preservation and forensic reporting
| Official item / responsible organization | Purpose and forensic relevance | Official source / last verified |
|---|---|---|
| ISO/IEC 27037:2012 ISO / IEC | Guidelines for identification, collection, acquisition, and preservation of digital evidence. Only the public catalog scope was verified; full text is access-controlled. | Official publication 2026-10-01 |
| NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response NIST | IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice. | Official publication 2026-10-09 |
Provenance, content authenticity, and metadata
| Official item / responsible organization | Purpose and forensic relevance | Official source / last verified |
|---|---|---|
| C2PA Specifications 2.4 Coalition for Content Provenance and Authenticity | Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation. | Official publication 2026-10-09 |
| PROV-DM: The PROV Data Model W3C | A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013. | Official publication 2026-10-09 |
Cryptographic integrity and time-stamping
| Official item / responsible organization | Purpose and forensic relevance | Official source / last verified |
|---|---|---|
| FIPS 180-4: Secure Hash Standard NIST | Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin. | Official publication 2026-10-01 |
| RFC 3161: Time-Stamp Protocol IETF / RFC Editor | A signed time-stamp token protocol. Evaluate the authority, token, and applicable updates; a file’s ordinary timestamp is different. | Official publication 2026-10-01 |
AI security / governance and media transparency
| Official item / responsible organization | Purpose and forensic relevance | Official source / last verified |
|---|---|---|
| AI Risk Management Framework NIST | Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding. | Official publication 2026-10-01 |
| NIST AI 100-4: Reducing Risks Posed by Synthetic Content NIST | 2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation. | Official publication 2026-10-09 |
What this page does not imply
No listing means that this project has been accredited, that a tool is certified, or that a case conclusion has met a legal evidentiary threshold. ISO/IEC 27037’s public catalog entry was verified; the access-controlled full standard was not reviewed for this release. NIST SP 800-86 is IT-oriented guidance published in 2006. The official NIST pages record ongoing revision work for AI RMF 1.0 and FIPS 180-4.
Source verification means that an official publication and its stated scope were checked on the listed date. It does not mean a complete conformance test was performed. The project’s methodology explains source classes and vendor-claim handling.
Sources & further reading
Source verification checks the official publication and its scope. It is separate from independent technical review of this reference page.
- ISO/IEC 27037:2012
Guidelines for identification, collection, acquisition, and preservation of digital evidence. Only the public catalog scope was verified; full text is access-controlled.
- NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response
IT-oriented forensic process and sources; published 2006. It is not a complete investigative procedure or legal advice.
- C2PA Specifications 2.4
Content Credentials technical specification and supporting documents. Claims and identity trust need separate evaluation.
- PROV-DM: The PROV Data Model
A model for entities, activities, agents, and derivation relationships; a W3C Recommendation from 2013.
- FIPS 180-4: Secure Hash Standard
Cryptographic digest algorithms, including SHA-256. The official page records a planned revision; a digest alone does not authenticate an origin.
- RFC 3161: Time-Stamp Protocol
A signed time-stamp token protocol. Evaluate the authority, token, and applicable updates; a file’s ordinary timestamp is different.
- AI Risk Management Framework
Voluntary AI risk management guidance. The official page says AI RMF 1.0 is being revised; it does not certify a forensic finding.
- NIST AI 100-4: Reducing Risks Posed by Synthetic Content
2024 overview of detection, watermarking, and content provenance approaches. Method performance requires context-specific evaluation.
Canonical reference: https://syntheticforensics.org/standards/
Report a technical correction