• Formalization of digital forensics emerged through codified models, needs analyses, and structured education, integrating theory with hands-on incident handling and evidence workflows [1], [4], [8], [13], [19].

• Multimedia forensics coalesced around fingerprinting, watermarking, steganography and their detection, including collusion-resistant schemes and LSB approaches that assess content integrity across media types [3], [5], [9], [11], [16].

• Network/Internet forensics expanded with honeypot analyses, internet crime perspectives, and intrusion-forensics workflows feeding cybercrime investigations and defense strategies [2], [7], [12], [17].

• Evidence-collection-centric discourses span incident response, digital-forensic models, and software-forensics practices to enable repeatable investigations and forensics education [1], [6], [13], [15], [19].