Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 19 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

HTCIA Conference: September 28 – October 2

From the 28th of September to the 2nd of October 2020, the HTCIA conference will be running online. If there are any topics you’d particularly like us to cover, or any speakers you think we should interview, please let us

AccessData Announces Release of Latest Version of Forensic Software Solution

The Newest Version of AccessData’s Forensic Software Enables Investigations Whenever and Wherever You Are Company announces the integration of QView® and the addition of similar face and object detection AccessData Group, a leading provider of integrated digital forensics and e-discovery

Remote Working Capabilities For Mobile Computers And Cloud Collections

Colleen: Hello and welcome to today’s webinar, Remote Working Capabilities For Mobile Computers And Cloud Collections. My name is Colleen Nugent and I’m part of the marketing team here at Cellebrite. And I’ll be facilitating today’s webinar.  Before we get

Live Webinar: Controlled Collaboration Using Group Permissions

Nuix Investigate Power User webinar series Digital investigations are often massive in scale and evidence volume, requiring the collaborative work of multiple investigators and analysts. Nuix Investigate contains robust user management and role-based settings so that case contributors can access

Somebody Else’s Hero: Mental Health In Digital Forensics

Impostor syndrome is a common topic on LinkedIn and other professional online career communities, but it seems especially poignant among digital forensics analysts, who frequently work 9-5 Monday to Friday viewing things that no human eye should ever have to

DFIRforGood Is A Great Start: Let’s Use It To Ask Tougher Questions

In recent weeks the DFIR community has increasingly begun to speak out under the hashtag #DFIRforGood following conference presentations by leaders in digital forensics and information security. In a keynote delivered at the SANS DFIR Summit in July 2020, Matt

Support For Android Mediatek Devices In Oxygen Forensic® Detective

MediaTek Inc. is one of the largest smartphone chipmakers in the world. Recognizing this, Oxygen Forensic Detective offers data extraction for Android devices based on MTK chipsets. The extraction method is based on a low-level proprietary protocol designed for firmware

White Paper – How MD-RED Recovers And Decrypts WhatsApp Data

Check out our research on the major features of WhatsApp and how MD-RED recovers and decrypts WhatsApp data. If you want to get the full version of the white paper send us your inquiry! http://www.hancomgmd.com/blog/whatsappwhitepaper/

Dealing With The Data Deluge In Law Enforcement

Eddie: Hello everyone and thank you for joining us. My name is Eddie Yandle, I’m Director of Marketing at Cellebrite. And we are here today for a discussion about dealing with the visual deluge in law enforcement. Today’s speakers will

Windows 10 Activity Timeline: An Investigator’s Gold Mine

Julie: Hi, everyone. Thanks for joining today’s webinar: Windows 10 Activity Timeline: An Investigator’s Gold Mine. My name is Julie O’Shea and I’m the manager of global marketing here at BlackBag.  Before we start today, there are a few things

MSAB & PenLink: Combining the Powers of Mobile Forensics

It’s all about those apps! Technology has moved our society past traditional phone calls and text messages; gathering data from mobile apps and social media providers has become the new normal. The bad news? Law enforcement must keep up. The

Digital Forensics Standard-Setting: Summer 2020 Round-Up

The summer has been a busy one for standards-setting organizations in the United States and European Union: In the U.S., the National Institute of Standards and Technology (NIST) published its final guidelines for cloud forensics, along with a document towards

Qualifying A Digital Forensic Expert In Court (Voir Dire)

Most digital forensic practitioners possess an analytical mind.  One of the reasons we become interested in the field is because we work to whittle down the digital elements of the case to try and present a clearer picture of the

XRY 9.1.2 – Checkm8 Extraction And BFU Acquisition For iOS

Today’s release of XRY 9.1.2 offers improved iOS support for data acquisition from iOS devices. The XRY integrated jailbreak tool, based on the checkm8 exploit, will now enable users to recover partial data even when in BFU mode. The new