"Digital Forensics" — on topic here, or create a separate site?

Question

There is a proposal currently in evaluation to create a new site in the field of digital forensic science:

Digital Forensics

This appears to be a part of "Information Security" but we don't generally want to split apart a site if a proposed subject is already wholly or largely on topic here.

Please have a look at the "example questions" above and let me know if they are defining a large ecosystem of questions that are not already covered here, or if the vast majority of questions would already be welcome on this site.

All comments are appreciated. Specific examples (or a question breakdown) of which questions from that proposal would be considered on/off topic would be helpful.

Thank you.

Answer 1

I would definitely say there is an overlap in terms of what is on topic. I've even found some similar questions on our site :

How to identify the presence of rootkits from an image of Linux memory? -> Are there any artifacts for filesystem forensics in memory?, How would one know if they have a rootkit?

How can I read data via ADB if an Android device is turned on but locked? -> How would one know if they have a rootkit?

Which Mobile OS has the most attack surfaces for a digital forensics expert to use in order to attempt recovery of encrypted data? -> Android full disk encryption, Are there actually any advantages to Android full-disk encryption?, Android L encryption vs. iOS 8 encryption

Is there a way to image a locked and encrypted iPhone and accessing the data for digital forensic investigation? -> Bruteforcing an iOS PIN

To me it seems that most of their questions would be on topic here. The only issue I see is that they have some subjective career advice and product-recommendation questions, which would be frowned upon here and outright banned for the latter.