Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

Investigating WMI Permanent Event Subscription Persistence

Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Today's headlines 19 Oct 2026

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Extracting Passwords From The Acquired Windows Registry

The Microsoft Windows operating system stores passwords and other login data for the installed applications on a system disk in the user profile directory, as well as in a hierarchical Windows registry database. By acquiring this database from a target

HTCIA International Conference And Expo 2020 – Recap

Like so many conferences this year, including some of its smaller chapter events, the High Technology Crime Investigators Association (HTCIA) annual event had to pivot its offerings to a virtual environment. During its week-long event from September 28 to October

Global Perspectives From Women In Digital Forensics

Women mathematicians and scientists invented the computer algorithm, software as we know it, and the foundation of telecommunications, including wireless communication. They helped break secret enemy messages during World War II, and ensured men got not just into space, but

Vitaliy Mokosiy, CTO, Atola

Vitaliy, it’s been a year since we last met to discuss the progress Atola was making developing its technology and TaskForce’s integration into Magnet AUTOMATE. And what a year that was! What has Atola accomplished since and how are you

Exploring New Features With BlackLight 10.2

Julie: Hi. Hey everyone. Thanks for joining our webinar today, Exploring New Features In BlackLight 10.2. My name is Julie O’Shea, and I’m a marketing manager here at Cellebrite. Before we get started, there are a few notes that I’d

Knowledge Sharing And Transfer In Digital Forensics

Sharing is at the heart of any community, and no less so in digital forensics and incident response. Sharing helps to avoid reinventing the wheel — or unnecessarily overcomplicating it. That’s especially true as the complexity of digital evidence advances