Forensic Focus Forums - Recent Topics

Webinar: Mastering Triage: Intro To ADF Pro

Zoe — Mon, 30 Mar 2026 12:19:51 +0000

Join Rich Frawley, a Digital Forensic Specialist and seasoned law enforcement veteran, to explore the powerful capabilities of ADF Pro, designed for investigators and lab examiners.

Watch the full webinar here: https://www.forensicfocus.com/webinars/mastering-triage-intro-to-adf-pro/

ex. cellebrite dongle

xaries — Sun, 29 Mar 2026 15:40:22 +0000

ı need a ex cellebrite dongle. ıf you want to sale your dongle please write o message

Beyond Keywords: AI Classification For Forensic Email Review

Zoe — Tue, 24 Mar 2026 11:55:07 +0000

When keyword searches hit their limits, Aid4Mail shows how AI-powered email classification can surface meaningful evidence across multilingual, high-volume datasets with far greater speed and context.

Read the full article here: https://www.forensicfocus.com/articles/beyond-keywords-ai-classification-for-forensic-email-review/

Podcast: Rob Fried On New Challenges In Digital Forensics

Zoe — Thu, 19 Mar 2026 16:00:02 +0000

Rob Fried joins the Forensic Focus Podcast to talk about the evolving challenges of forensic practice, AI in investigations, and his latest book.

Watch the full episode here: https://www.forensicfocus.com/podcast/rob-fried-on-new-challenges-in-digital-forensics/

Interview: JeongKyun Park, Information Security Student And Independent Developer, Korea Cyber University

Zoe — Tue, 17 Mar 2026 13:26:39 +0000

From Navy CERT to building ICE-Forensic, JeongKyun Park shares how a passion for uncovering the truth through system traces is driving his transition into digital forensics and incident response.

Read the full interview here: https://www.forensicfocus.com/interviews/jeongkyun-park-information-security-student-and-independent-developer-korea-cyber-university/

Question about keeping manifests/logs tamper-evident

Machariel — Mon, 16 Mar 2026 11:55:05 +0000

Hi all,

I’m a developer with an interest in digital evidence integrity. It bothers me that logs, manifests, or artifact inventories can potentially be altered before they ever reach court.

I’ve developed a working CLI tool that currently implements things like:

hashing collected items
signing manifests (when a key is available)
internally chained log entries
verification of manifests and logs afterwards

The idea is to record interesting file states as early as possible so there’s a stronger trail showing that artifacts and items of interest remained unchanged later on. I can't imagine I'm done feature-wise. This is where your feedback comes in.

What I’m curious about is the practical side from people who actually investigate cases or even take decisions in a final stage, whether it's a judge, committee, prosecutor deciding for a go/no-go and so forth.

For example:

How often do you run into concerns about digital evidence, log, or manifest tampering?
Are integrity protections (hashes, signatures, chained logs) something investigators rely on, or would rely on if certain conditions are met?
What tends to matter most when these artifacts end up being reviewed by courts, lawyers, or oversight bodies?
When accusations of digital tampering arise (or need to arise), what actually helps to prove or disprove them?

I’m mainly trying to understand what investigators and legal reviewers actually need here rather than guessing from the engineering side.

Thanks for any insight.

Establishing Vehicle Occupant Actions & Involvement Through Vehicle Data

Zoe — Thu, 12 Mar 2026 12:41:02 +0000

How can vehicle data help determine who was involved in a crime? Berla demonstrates how door, seat, and seatbelt events can reconstruct occupant activity and timelines.

Read the full article here: https://www.forensicfocus.com/articles/establishing-vehicle-occupant-actions-involvement-through-vehicle-data/

Why Event Log Archiving Is Critical For Timeline Reconstruction

Zoe — Thu, 12 Mar 2026 12:00:43 +0000

Missing event logs can mean missing evidence — here’s why proactive archiving is essential for reliable timeline reconstruction in digital investigations.

Read the article here: https://www.forensicfocus.com/articles/why-event-log-archiving-is-critical-for-timeline-reconstruction/

Interview: Yuri Gubanov, Founder and CEO, Belkasoft

Zoe — Tue, 10 Mar 2026 14:42:00 +0000

Belkasoft CEO Yuri Gubanov discusses the company's current line-up of products, how AI can be used in investigations, and the evolving challenges facing digital forensic investigators worldwide.

Read the full interview here: https://www.forensicfocus.com/interviews/yuri-gubanov-founder-and-ceo-belkasoft/

Interview: Emma Pickering, Head of Technology Facilitated Abuse and Economic Empowerment, Refuge

Zoe — Mon, 09 Mar 2026 12:59:01 +0000

Emma Pickering of Refuge warns of a 62% surge in tech-facilitated abuse—from stalkerware and spy cams to deepfakes and wearable surveillance—and explains why policing and digital forensics must urgently catch up.

Read the full interview here: https://www.forensicfocus.com/interviews/emma-pickering-head-of-technology-facilitated-abuse-and-economic-empowerment-refuge/