Forensic Focus, Author at Forensic Focus

DFIR News, 21 Oct 2026

21st October 202621st October 2026

Today: Europol and European Commission identify cloud, IoT and vehicle forensics gaps across EU member states; Framework guides examiners and attorneys on evidence authentication, attribution and courtroom testimony, and more.

DFIR News, 20 Oct 2026

20th October 202620th October 2026

Today: Vitalii Kukhol details WMI permanent subscription detection using Sysmon, Volatility 3 and scrcons.exe artifacts; Atola Technology releases TaskForce firmware 2026.10 with a Compare module and Seagate fraud detection, and more.

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup.

DFIR News, 19 Oct 2026

19th October 202619th October 2026

Today: Europol and the European Commission identify cloud, IoT and vehicle forensics gaps across EU Member States; Georgia Tech researchers build ORISA to recover deleted AI assistant chats from Android memory, and more.

DFIR News, 16 Oct 2026

16th October 202616th October 2026

Today: Forensic Focus State of DFIR Survey opens, closing 30 November 2026 with results due January; Magnet Autokey extracts vehicle infotainment data including GPS, door events and connected device logs, and more.

Forensic Focus Digest, 16 Oct 2026

16th October 202616th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior,

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Have your say on the state of DFIR: Forensic Focus State of DFIR Survey.

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report

DFIR News, 15 Oct 2026

15th October 202615th October 2026

Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber to replace legacy tools; eBPF rootkits LinkPro and VoidLink suppress EDR visibility at kernel level, and more.

DFIR News, 14 Oct 2026

14th October 202614th October 2026

Today: Guocai Wang shows how blur type, not blur alone, drives licence plate enhancement decisions; iVe analysis of a 2026 Hyundai Kona distinguished deliberate from accidental driving in a UK murder case, and more.

Beyond Blur: Decision-Making In Complex Licence Plate Examination And Enhancement Casework

13th October 2026

Guocai Wang explores why “blurred” is not a diagnosis in forensic licence-plate analysis, and why the processing strategy should follow the material while the strength of interpretation follows the evidence.

DFIR News, 12 Oct 2026

12th October 202612th October 2026

Today: VLEAPP grows from 103 to 202 artifacts, adding Ford SYNC, GM OnStar and BMW MGU support; VESTIGEX releases as a new free Windows desktop platform for DFIR, and more.

Forensic Focus Digest, 09 Oct 2026

9th October 2026

Discover what’s new on Forensic Focus: explore Belkasoft X for mobile forensics on iOS and Android, find out how MSAB’s XRY Pro and BruteStorm Surge helped expose an international fraud network, see how MD-LIVE’s Block Hash Scan identifies known target