Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 20 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Everything You Ever Wanted To Ask About Checkm8 And Checkra1n

by Oxygen Forensics What’s Checkm8? Checkm8 is an exploit (program exploiting OS or hardware vulnerabilities) aimed at obtaining access to the execution of its own software code at the earliest stage of iOS device loading. What makes it stand out?

Everything You Ever Wanted To Ask About Checkm8 And Checkra1n

by Oxygen Forensics  What’s Checkm8? Checkm8 is an exploit (program exploiting OS or hardware vulnerabilities) aimed at obtaining access to the execution of its own software code at the earliest stage of iOS device loading. What makes it stand out?

BlackLight R3 From BlackBag

by Jade James BlackLight is a simple but smart investigation tool which allows examiners to quickly analyse computer systems and mobile devices. Searching is made easy with advanced filtering to sift through large data sets. The tool is aimed at

Forensic Tools For Investigating Child Sexual Abuse Material

Laura Sanchez discusses her research at DFRWS US 2019. Hello, I’m Laura Sanchez and I’m a graduate researcher at the University of New Haven. And I’ll be presenting the results of our survey that was conducted by my colleagues. Our

BlackLight R3 From BlackBag

by Jade James BlackLight is a simple but smart investigation tool which allows examiners to quickly analyse computer systems and mobile devices. Searching is made easy with advanced filtering to sift through large data sets. The tool is aimed at

What’s Happening In Forensics – Mar 03, 2020

13Cubed share a memory forensics challenge. Petr Stuchlík discusses SMB endpoint fingerprinting. DFRWS share presentations from last year’s US conference. Ryan Benson shares some digital forensics writing tips.

Chromium-Based Microsoft Edge From A Forensic Point Of View

by Oleg Skulkin & Svetlana Ostrovskaya Recently Microsoft finally released the Chromium-based version of Edge Browser, so it seems we’ll miss ESE databases soon (not). Of course, it may have a similar set of forensic artifacts to Chromium or Chrome,

Chromium-Based Microsoft Edge From A Forensic Point Of View

by Oleg Skulkin & Svetlana Ostrovskaya Recently Microsoft finally released the Chromium-based version of Edge Browser, so it seems we’ll miss ESE databases soon (not). Of course, it may have a similar set of forensic artifacts to Chromium or Chrome,

Forensic Pattern Of Life Analysis

by Christa Miller, Forensic Focus Pattern of life analysis isn’t a new concept to anyone who’s ever been involved with intelligence, in particular surveillance. It’s all about the habits that people — suspects, persons of interest, crime victims, or those

Forensic Pattern Of Life Analysis

by Christa Miller, Forensic Focus Pattern of life analysis isn’t a new concept to anyone who’s ever been involved with intelligence, in particular surveillance.  It’s all about the habits that people — suspects, persons of interest, crime victims, or those

BlackBag Announces Release of MacQuisition 2020 R1

MacQuisition brings together the most comprehensive Apple imaging with new live and booted triaging of Apple devices, in industry-leading release.BlackBag Technologies, a Cellebrite company, announces the release of MacQuisition 2020 R1, adding triage capabilities to their industry-leading acquisition and forensic

FORMOBILE Survey: Law Enforcement Officers’ Requirements For Training

For a project that promises great leaps in the development of mobile forensic related technologies, and a complete guide to the practices and standards that professionals in Europe should follow, the necessary training to support these initiatives is critical! That