A round-up of this week’s digital forensics news and views:
Free Mobile Forensics Talks Shared With The Community
MSAB has published on-demand recordings from its 2026 Mobile Forensics Digital Summit, giving investigators access to sessions on encrypted data validation, Android and iOS artifacts, anti-forensics, open-source tools, web history recovery, cryptocurrency traces, attribution, and examiner well-being.
DFIR Toolkit Launches Privacy-First Browser Utilities
Andrea Fortuna has launched DFIR Toolkit, a browser-based set of utilities for common forensic and incident response tasks. Initial tools cover IOC extraction, timestamp conversion, file hashing, and email header analysis, all processed locally in the browser. The privacy-first design aims to speed triage without sending sensitive data to external servers.
Establishing Vehicle Occupant Actions & Involvement Through Vehicle Data
Door, seat and seat belt events can help investigators reconstruct who entered, exited and stayed inside a vehicle during key moments. Using data from a 2026 Hyundai Kona test drive, Berla shows how timing and location patterns can support involvement assessments while still requiring corroboration for rear-seat activity.
MacOS Analyzer Suite Adds KnockKnock And VirusTotal Scripts
MacOS-Analyzer-Suite v1.2.0 is now available with two new PowerShell scripts for threat hunting. Added support includes KnockKnock-Analyzer, credited to Objective-See Foundation, and VirusTotal-Analyzer. The update is likely to interest macOS-focused DFIR teams seeking broader analysis options.
Deepfake Audio Raises New Evidence Risks
Fabricated audio is entering legal proceedings and insurance claims without clear protocols to detect it. Risk grows when fake recordings sound convincing, pushing investigators toward front-end AI triage and human forensic review for higher-stakes cases.
DFRWS EU 2026 Highlights Memory Forensics Research
DFRWS EU 2026 spotlights memory forensics with sessions on volatile memory acquisition, structural analysis, evidence resilience, and live symmetric key extraction. Practitioners focused on digital evidence and incident response may find the program useful for current methods in volatile environments.
Cellebrite Pushes Near-Real-Time AI Analysis For Seized Devices
Cellebrite says its new AI tools can analyze data from seized phones and computers in near real time, linking call records, messages, images and location data as evidence is uploaded. That could speed major investigations, but forensic experts warn analysts must still verify AI findings against original evidence before they can hold up in court.
Read more (computerweekly.com)
Why Event Log Archiving Matters For Timeline Reconstruction
Windows event logs can be overwritten, cleared, or only partly captured by SIEM filters, leaving critical gaps in forensic timelines. To reduce that risk, the piece recommends automated archiving of all .evtx logs to a remote system using built-in tools such as cmdkey and wevtutil.
Interview: JeongKyun Park, Information Security Student And Independent Developer
JeongKyun Park, a Korea Cyber University student and former Navy CERT member, has built ICE-Forensic as a zero-install browser-based forensics tool. Current features include a hex viewer, metadata analysis, search, and hashing.
Matthew Plascencia Recaps MSAB Summit’s Mobile Forensics Talks
A new recap from the MSAB Mobile Forensics Summit highlights five talks that stood out for their focus on artifacts, investigative theory, and open-source work. Coverage points to practical themes in iOS, Android, and Unix examinations, making it relevant for practitioners tracking mobile forensics methods.
Read more (matthewplascencia.substack.com)
IACIS Highlights Lab Accreditation Training For DFIR Leaders
IACIS is promoting a course on preparing digital forensics labs for accreditation at its 2026 Orlando Training Conference. It focuses on ISO/IEC 17025 quality systems, documentation, tool validation, and internal audits. The training targets lab managers and technical leads who need consistent, defensible forensic processes.
Free Lumyx Course Highlights Timeline Analysis For Investigations
Hexordia is offering a free Lumyx Essentials Course with a 14-day trial of the web-based tool. Designed for investigators, lawyers, and forensic teams, Lumyx helps turn location and related data into cohesive timelines and courtroom-ready presentations.
