Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

The Forensic Focus State Of DFIR Survey Is Now Open

Hero Image

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...

Today's headlines 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

Magnet Autokey: Accelerating Your Vehicle Investigations

Magnet Autokey: Accelerating Your Vehicle Investigations

Jason Miranda and Evan Walker from Magnet Forensics show how Magnet Autokey pulls location history, connected devices and even text messages from encrypted vehicle infotainment systems in under 30 minutes....read more

Semantics 21 Is Calling Time On Outdated Investigation Tools

Semantics 21 Is Calling Time On Outdated Investigation Tools

Digital evidence has evolved, and investigative tools must keep pace - discover how Semantics 21 helps investigators work faster, search smarter and maintain control without compromising professional judgement....read more

Run Sigma rules on a live machine with DRONE

Sigma is a community effort to write detections for IoC’s, and now with DRONE, you can scan these IoC’s on a live machine. Typically, these Sigma rules are designed to be executed or scanned on SIEM logs but with DRONE,

Streamlining the FTK Workflow With Portable Cases

Want to cut down on your backlog and your work by making someone else do the basic review? Well, you’re in luck, because this week we’re talking about Portable Case in FTK Feature Focus. Welcome back to FTK Feature Focus.

Password Protecting XRY Files

Hello. My name is Greg Masterson. I’m a tech sales engineer with MSAB. Welcome to XRY in 5. So in today’s XRY in 5 video, we’re going to be talking about password protecting our evidence. The idea of password protecting

New release from MSAB: XRY 9.6, XAMN 6.2 and XEC 6.5

Added support for more devices, selective App Extraction, Apple facial recognition decoding, support for iOS 15 and Android 12 Beta, plus many more improvements. In our ongoing mission to make our digital forensics solutions better, we constantly strive for continuous

Using Network Capture with Binalyze AIR

Steve: Good afternoon, everyone, and welcome to our “Network Capture Using Binalyze AIR” workshop. We have two people on the call today, so we have Emre who I guess you’re all pretty familiar with, who’s the founder and CEO of

Customizing Password Attacks in Oxygen Forensic Detective

Device screen locks and encryption are some of the most significant challenges law enforcement faces in acquiring data for investigations. With Oxygen Forensic® Detective, however, investigators can bypass screen locks to extract and decrypt crucial evidence from Android devices based

XRY Generic Profiles Explained

Hello, my name is Wil Hernandez and I’m a tech sales engineer with MSAB and welcome to XRY in 5. In today’s XRY in 5, we’re going to talk about the generic profiles. How do you get to the generic

The AFF4 Evidence Container: Why and What’s Next

Well, good day. My name is Bradley Schatz, I’m from Evimetry. Today I’m here, it’s my distinct pleasure to be here at the Magnet Virtual Summit to talk about the Advanced Forensic Format Container version four. That’s an evidence container