Software forensics is the use of authorship analysis techniques to analyse computer programs for a legal or official purpose. This generally consists of plagiarism detection and malicious code analysis. IDENTIFIED is a system that has been designed to assist with the extraction of count based metrics from source code, and with the development of models of authorship using statistical and machine learning approaches. Software forensic models can be used for identification, classification, characterisation, and intent analysis. One of the more promising methods for identification is case-based reasoning, where samples of code can be compared to those collected from known authors.