Carving and data hiding. On efficiency and effectiveness of linear function detection approaches for memory carving / Lorenz Liebler and Harald Baier -- fishy - a framework for implementing Filesystem-based data hiding techniques / Thomas Göbel and Harald Baier -- Android. If I had a million cryptos: Cryptowallet application analysis and a Trojan proof-of-concept / Trevor Haigh, Frank Breitinger, and Ibrahim Baggili -- Androparse - an Android feature extraction framework and dataset / Robert Schmicker, Frnak Breitinger, and Ibrahim Baggili -- Forensic readiness. Digital forensic readiness framework for ransomware investigation / Avinash Singh, Adeyemi R. Ikuesan, and Hein S. Venter -- Forensics analysis of an on-line game over Steam platform / Raquel Tabuyo-Benito, Hayretdin Bahsi, and Pedro Peris-Lopez -- A digital forensic investigation and verification model for industrial espionage / Jieun Dokko and Michael Shin -- Hard drives and digital forensics. Solid state drive forensics: Where do we stand? / John Vieyra, Mark Scanlon, and Nhien-An Le-Khac -- Associationg drives based on their artifact and metadata distributions / Neil C. Rowe -- Artefact correlation. Digital forensics event graph reconstruction / Daniel J. Schelkoph, Gilbert L. Peterson, and James S. Okolica -- Multi-item passphrases: a self-adaptive approach against offline guessing attacks / Jaryn Shen, Kim-Kwang Raymond Choo, amd Quingkai Zeng -- Short paper. Hybrid intrusion detection system for worm attacks based on their network behavior / Hassan Hadi Latheeth AL-Maksousy and Michele C. Weigle.