Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 19 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

How To Timeline Login Information From Windows Event Logs

Justin: Alright. So, hello. And this is a recorded video, so just kind of, welcome, whenever you’re watching this. I’m Justin Tolman, I am the Director of Training for AccessData, and today, for the next little bit, we’ll be talking

XRY V9.3 From MSAB

Digital forensic practitioners have been largely focused on mobile devices since the advent of the smart phone. Through the virtually countless generations of Apple, Android, Blackberry, Windows and legacy phones, the forensic analysis community has learned that the data contained

DFRWS APAC 2021: Call For Participation

DFRWS, organizers of the longest-running research conference in digital forensics (http://www.dfrws.org), invite you to participate in the DFRWS-APAC 2021 Virtual Conference, which will be held January 27-29, 2021, in an Asia-Pacific friendly time zone. Program Information The DFRWS conference brings

Jad Saliba, Founder & CTO, Magnet Forensics

Jad, 2020 was a challenging year in many ways. What operational challenges did Magnet Forensics’ law enforcement customers reflect were of particular concern? How did they pivot, and how did Magnet Forensics help them? It definitely was a challenging year

Year In Review: 2020 MD-Series Product Highlights

As we all know, 2020 was an exceptional year. It was a challenging one for all of us. In this issue, we look back at the new and improved technology developed in 2020. MD-NEXT v1.88.0 – v1.89.13 1. Bootloader Pro

How To Efficiently Decrypt TrueCrypt/VeraCrypt Encryption Using Passware

VeraCrypt and the former TrueCrypt are two of the most challenging types of encryption to bypass with regard to their popularity as full disk encryption software. Unlike Bitlocker encryption, TrueCrypt/VeraCrypt may encrypt their containers and volumes with multiple encryption keys (cascade

Register For Webinar: Take Control Of Microsoft O365 Data With Nuix

More than a million organizations worldwide use Microsoft Office,* generating voluminous O365 data across the enterprise. Join Nuix Senior Principal Enterprise Architect Alex Chatzistamatis as he shows you how to use the new Nuix Microsoft O365 connectors to move evidence

Huawei Extraction With Oxygen Forensic Detective

Keith: Hey, this is Keith Lockhart, Director of Training at Oxygen Forensics. In this webinar, we’re going to have a look at Huawei devices, and specifically those that have a Kirin family chipset. So it’s very timely that the company

Adam Belsher, CEO, Magnet Forensics

Adam, it’s been a while since we sat down with you! Since our last conversation, this time three years ago, how has the digital forensics landscape changed — and what (if anything) has remained the same? It’s nice to have

What’s New In Open Source Digital Forensics: OSDFCon 2020 Recap

The Open Source Digital Forensics Conference (OSDFCon) kicked off its second decade virtually and, thanks to sponsorships, free of charge. Usually hosted each October in Washington, D.C., OSDFCon this year drew 12,000 people from around the globe: a massive increase