DFIR News, 27 Oct 2026
Today: Cellebrite Autumn 2026 Release expands Genesis AI with drone forensics and CDR analysis; Citizen Lab, Amnesty and SHARE Foundation confirm Serbia used Pegasus and NoviSpy against 15 targets, and more.
Forensic Focus
DFIR News, 26 Oct 2026
Today: Eric Zimmerman’s forensic tools migrate from .NET 9 to .NET 10 LTS; Six LEAPP tools add SHA-256 hashing, LVM2, LUKS, RAID support and new artifacts, and more.
Forensic Focus Digest, 23 Oct 2026
Discover what’s new on Forensic Focus: explore WMI permanent event subscription persistence with Vitalii, see how MD-RED v4 handles AI-powered mobile forensic analysis, hear how user feedback shapes new features in Amped FIVE, and more.
DFIR News, 22 Oct 2026
Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber for offline forensic analysis; Passware Kit 2026 v4 adds YellowKey BitLocker recovery, E01 export and eCryptfs support, and more.
DFIR News, 21 Oct 2026
Today: Europol and European Commission identify cloud, IoT and vehicle forensics gaps across EU member states; Framework guides examiners and attorneys on evidence authentication, attribution and courtroom testimony, and more.
DFIR News, 20 Oct 2026
Today: Vitalii Kukhol details WMI permanent subscription detection using Sysmon, Volatility 3 and scrcons.exe artifacts; Atola Technology releases TaskForce firmware 2026.10 with a Compare module and Seagate fraud detection, and more.
Investigating WMI Permanent Event Subscription Persistence
Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup.
DFIR News, 19 Oct 2026
Today: Europol and the European Commission identify cloud, IoT and vehicle forensics gaps across EU Member States; Georgia Tech researchers build ORISA to recover deleted AI assistant chats from Android memory, and more.
DFIR News, 16 Oct 2026
Today: Forensic Focus State of DFIR Survey opens, closing 30 November 2026 with results due January; Magnet Autokey extracts vehicle infotainment data including GPS, door events and connected device logs, and more.
Forensic Focus Digest, 16 Oct 2026
Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior,
The Forensic Focus State Of DFIR Survey Is Now Open
Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report
DFIR News, 15 Oct 2026
Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber to replace legacy tools; eBPF rootkits LinkPro and VoidLink suppress EDR visibility at kernel level, and more.
DFIR News, 14 Oct 2026
Today: Guocai Wang shows how blur type, not blur alone, drives licence plate enhancement decisions; iVe analysis of a 2026 Hyundai Kona distinguished deliberate from accidental driving in a UK murder case, and more.
Beyond Blur: Decision-Making In Complex Licence Plate Examination And Enhancement Casework
Guocai Wang explores why “blurred” is not a diagnosis in forensic licence-plate analysis, and why the processing strategy should follow the material while the strength of interpretation follows the evidence.
DFIR News, 12 Oct 2026
Today: VLEAPP grows from 103 to 202 artifacts, adding Ford SYNC, GM OnStar and BMW MGU support; VESTIGEX releases as a new free Windows desktop platform for DFIR, and more.
Forensic Focus Digest, 09 Oct 2026
Discover what’s new on Forensic Focus: explore Belkasoft X for mobile forensics on iOS and Android, find out how MSAB’s XRY Pro and BruteStorm Surge helped expose an international fraud network, see how MD-LIVE’s Block Hash Scan identifies known target