Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Investigating WMI Permanent Event Subscription Persistence

Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Today's headlines 19 Oct 2026

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

A Springboard To Digital Forensics Research In 2021

The end of 2020 could not come fast enough for most of us, and yet, as the year wound down, some things — such as the digital forensics research recapped in this article — were worth slowing down for. This

Are You Looking To Get #DFIRfit In 2021?

Few digital forensics practitioners would dispute that their job is largely sedentary: there’s a lot of sitting, be it in labs, vehicles (including aircraft), meeting rooms, and conference lecture rooms, among others. That only became more true in 2020, when

Writing DFIR Reports: A Primer

“How do I write a good DFIR report?” – Literally Everyone at some point You wouldn’t believe how many times that question gets asked out of me here at Marshall University (and sometimes in the DFIR community). Year after year I’ve

Oxygen Forensic Detective From Oxygen Forensics

I have been using Oxygen Forensic Detective for academic and professional investigations since 2016, when the last available version was 8.4. Mobile forensics procedures have evolved a lot. Mobile software and hardware, applications and the information stored in smart devices

iOS Screentine And Android Digital Wellbeing Apps

Matt: And good morning, everyone. So yeah, like Melissa said, today we’re going to talk a little bit about screen time for iOS and digital wellbeing for Android. A little on what they are and how you can apply them

Virtual Forensic Computing (VFC)

Host: All right. Hello everyone. Welcome. Welcome to our first webinar, I believe, we’ve had with VFC. It’s a Teel Technologies VFC project. Just to be able to bring people to be aware of Virtual Forensic Computing and how it

How To Extract Text From Files Using OCR In Magnet AXIOM

Tara: Hey everyone, Tara Melton here, and I’m going to be showing you a new and exciting feature introduced in AXIOM 4.8. Now you can extract text from certain files using optical character recognition, or OCR, technology. AXIOM will extract

Bobby Balachandran, CEO, Exterro

Welcome, Bobby, and congratulations on the acquisition of AccessData! Why was a forensic company important to add to the Exterro portfolio and why AccessData specifically? Thank you! The heart of the decision came from knowing that we have technology that

How To Investigate The Source Camera Of Digital Videos

Unique features that allow for identification are considered a real blessing in investigations. First, there was fingerprint analysis, then DNA analysis brought a real revolution, raising the contribution of scientific analysis to investigations at unprecedented levels. The field of digital