Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 19 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

MSAB: Top 10 Updates Of 2020

The top 10 most valuable updates of 2020, from MSAB: 32,931 supported profilesIncluding iOS 14, Samsung A & J series, Huawei Mediatech devices and LG Qualcomm devicesCheckm8 exploit is now integrated in XRYNew connected device screen capture capability in XRY

What the Tech? FTK Features That Might Surprise You

Holli Hagene: Hi, everyone. Thank you for joining us today for our webinar, FTK features that might surprise you. My name is Holli Hagene and I’m a marketing manager at AccessData. Before I hand things over to our presenters. I

MSAB New Release: XRY 9.3, XAMN 5.3 And XEC 6.2

Added support to bypass locked Samsung Galaxy Exynos devices in XRY, new conversation view in XAMN, plus major improvements in network support in XEC. We are happy to announce that the new versions of XRY, XAMN and XEC represent a

Marco Fontani, R&D Engineer, Amped Software

Marco, let’s start with a little about you. How did you come to your interest in multimedia forensics and engineering? My interest in engineering began when I was in high school. I had some older friends who were in university

How To Use Nuix Promote To Discover

Welcome everyone. My name is Jenna Czaplicki, and today I’m going to walk you through a feature called ‘Promote to Discover.’ Promote to Discover is a feature available in both Nuix Workstation and Nuix Investigate, but today we will focus

How To Use The Categories Filter In XAMN

Welcome to this quick how-to guide explaining how to work with the Categories filter within XAMN. Categories filter is a powerful tool that is built into the heart of XAMN to help you quickly identify artifacts of a specific type