Articles

Cellebrite Genesis vs. ChatGPT: Why You Need Purpose-Built Investigative AI

22nd October 2026

What sets purpose-built investigative AI apart from general-purpose LLMs? Discover how Cellebrite Genesis helps investigators analyze digital evidence with traceable findings, warrant-bound search, and secure data handling.

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup.

Beyond Blur: Decision-Making In Complex Licence Plate Examination And Enhancement Casework

13th October 2026

Guocai Wang explores why “blurred” is not a diagnosis in forensic licence-plate analysis, and why the processing strategy should follow the material while the strength of interpretation follows the evidence.

Analyzing Driver Behavior Using Vehicle Data

13th October 2026

Can vehicle data reveal the difference between normal and reckless driving? Discover how iVe uses velocity logs, hard braking, and acceleration events to uncover critical changes in driver behavior and provide valuable evidence in investigations.

Belkasoft X For Mobile Forensics: Acquisition, Analysis, And Reporting

7th October 20265th October 2026

Explore Belkasoft X as a mobile forensics tool for iOS and Android acquisitions, full-file-system extraction, data recovery, application analysis, and reporting.

Green Meets Blue: A Brief RCS Forensic Excursion

29th September 2026

What does RCS mean for digital forensics? MSAB Digital Forensic Specialist Markus Hess breaks down how RCS works, who uses it and where investigators can find the forensic evidence.

Corrobora – Cross-Artifact Consistency Analysis For Windows Digital Forensics

24th September 2026

Dielle De Noon explores the development and validation of two key components of her open-source Windows digital forensics framework and how they lay the foundation for future cross-artifact correlation.

A Stab Vest Is Protection. DFIR “Resilience” Is Not.

5th October 202617th September 2026

We would never tell a police officer to face a blade with “resilience” instead of body armour, so why do we expect digital forensic investigators to face repeated trauma with little more than resilience to protect them?

Forensic Imaging Is A Workflow Problem, Not Just A Speed Problem

15th September 202615th September 2026

Atola TaskForce 2 helps forensic labs reduce imaging backlogs by combining fast parallel acquisition, automation, smarter workflows, and high-speed connectivity to keep evidence moving.

The Sound Of Silence – What Institutional Silence On DFI Well-Being Actually Tells Us

5th October 202610th September 2026

When six organisations receive evidence that one in five digital forensic investigators meet the clinical threshold for suicidal or self-harm ideation, and only one responds, what does that silence say about who is looking out for the profession?

“The Skills And Resilience To Do One Of The Hardest Jobs In Policing” — Why This DFIR Recruitment Language Gets The Evidence Wrong

5th October 20263rd September 2026

Does recruiting for “resilience” risk putting responsibility in the wrong place? Paul Gullon-Scott looks at what the evidence says about digital forensic well-being, workload and organisational support, and why the language we use matters.