Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Forensic Focus

Registry Recon

Reviewed by Cheryl A. Purdy, MBA, A+, CCNA, CCAI, ACE, AME Executive Summary Registry Recon, developed by Arsenal Recon, is a powerful computer forensics tool used to extract, recover, and parse registry data from Windows systems. The process of manually

How to Stop Worrying and Learn to Love Your Inner Impostor

by Christa M. Miller It’s pretty much impossible to work in a small, niche community like DFIR and not eventually rub elbows with a rock star. You go to a conference and get to talking with someone, and you don’t

How to Stop Worrying and Learn to Love Your Inner Impostor

by Christa M. Miller It’s pretty much impossible to work in a small, niche community like DFIR and not eventually rub elbows with a rock star. You go to a conference and get to talking with someone, and you don’t

CIFI Security Summit 2016 – London 6th-7th July

From the 6th – 7th of July 2016, Forensic Focus will be attending the CIFI Security Summit in London, England. If there are any topics you’d particularly like us to cover, or any speakers you think we should interview, please

CIFI Security Summit 2016 – London 6th – 7th July

From the 6th – 7th of July 2016, Forensic Focus will be attending the CIFI Security Summit in London, England. If there are any topics you’d particularly like us to cover, or any speakers you think we should interview, please

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members help with a winhex problem. Do you have any suggestions for OSINT training? How do you go about finding the deleted dates for files on

Interview With Lee Reiber, COO, Oxygen Forensics

Lee, you're COO at Oxygen Forensics. Tell us a bit about your work; what does your day-to-day role entail? As the Chief Operations Officer of Oxygen Forensics Inc., I wear many hats. Primarily, I assist the company with day to

Lee Reiber, COO, Oxygen Forensics

Lee, you're COO at Oxygen Forensics. Tell us a bit about your work; what does your day-to-day role entail? As the Chief Operations Officer of Oxygen Forensics Inc., I wear many hats. Primarily, I assist the company with day to

Noora Al Mutawa, Head of Computer Examination Section, Dubai Police

Noora, you presented a paper on the challenges of investigating cyberstalking at DFRWS. Tell us a bit about your research and what you found. The research combined the techniques of Digital Forensics with the strategies of Behavioural Evidence Analysis in

SSD and eMMC Forensics 2016 – Part 3

What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence: Demystifying eMMC, M.2, NVMe, and PCI-E. by Yuri Gubanov & Oleg Afonin© Belkasoft Research 2016 In the previous part of the article, we talked about eMMC storages and

SSD and eMMC Forensics 2016 – Part 3

What Has Changed in 2016 in the Way SSD Drives Self-Destruct Evidence: Demystifying eMMC, M.2, NVMe, and PCI-E. by Yuri Gubanov & Oleg Afonin © Belkasoft Research 2016 In the previous part of the article, we talked about eMMC storages

Interview with Vladimir Katalov, Co-Founder and CEO, ElcomSoft

Vladimir, you’re co-founder and CEO at ElcomSoft. Tell us a bit about your role – how has it changed this year? I do quite a lot of things from marketing to technical support, and from project management to presentations about

Vladimir Katalov, Co-Founder and CEO, ElcomSoft

Vladimir, you’re co-founder and CEO at ElcomSoft. Tell us a bit about your role – how has it changed this year? I do quite a lot of things from marketing to technical support, and from project management to presentations about

Forensics Europe Expo – Recap

This article is a recap of some of the main highlights from the Forensics Europe Expo which took place at Kensington Olympia Conference Centre, London, on the 19th-20th of April 2016. The Forensics Europe Expo covers all aspects of forensics,