Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 20 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Joe Walsh On Private Browsing Data And Teaching Digital Forensics Online

Christa: Hello and welcome to the Forensic Focus podcast. Monthly we interview experts from the digital forensics and incident response community on a host of topics ranging from technical aspects to career soft skills. I’m your host, Christa Miller. Today

What’s Happening In Forensics – Jan 16, 2020

Packt Publishing have a $5 sale on all digital forensics ebooks. Gilad David Maayan shares 8 free tools to help automate the incident response process. The CfP for the SANS DFIR Summit opens today.

What’s Happening In Forensics – Jan 15, 2020

Elcomsoft’s Oleg Afonin discusses the true meaning of iOS recovery, DFU and SOS modes for mobile forensics. DFIR.training share new tools, reviews and events. HTCIA 2020 is open for presentation submissions. Cellebrite release UFED, UFED Physical Analyzer, UFED Logical Analyzer

Interview With Jon Langton, TransPerfect Legal Solutions

Jon, tell us about your role at TransPerfect Legal Solutions. What does a typical day look like? I have the privilege of managing a talented team of eight forensic examiners in our New York forensic lab, in addition to contributing

What’s Happening In Forensics – Jan 14, 2020

Cellebrite have acquired BlackBag Technologies. Sarah Edwards provides context to iOS app usage with knowledgeC.db and APOLLO. Gillware Digital Forensics is now Tetra Defense. Belkasoft announce their 2020 training courses.

Interview With Jad Saliba, Founder & CTO, Magnet Forensics

Jad, tell us a bit about OUTRIDER and how it came about? We talk to officials in law enforcement from a variety of different backgrounds and the one constant for us is trying to find ways to help them do

What’s Happening In Forensics – Jan 13, 2020

The SANS Cyber Threat Intelligence Summit will be taking place next week in Washington, DC. BlackBag share a case study showing how geolocation data was used to track down a burglar. Cyber Triage Version 2.11 has been released, featuring investigation

Jon Langton, TransPerfect Legal Solutions

Jon, tell us about your role at TransPerfect Legal Solutions. What does a typical day look like? I have the privilege of managing a talented team of eight forensic examiners in our New York forensic lab, in addition to contributing

Jad Saliba, Founder & CTO, Magnet Forensics

Jad, tell us a bit about OUTRIDER and how it came about? We talk to officials in law enforcement from a variety of different backgrounds and the one constant for us is trying to find ways to help them do

What’s Happening In Forensics – Jan 10, 2020

Daniel Bunce shares a custom tool for shellcode analysis. Two Europol StopChildAbuse images have been successfully geolocated, as reported in a post by Bellingcat. SANS are developing a training course for cloud forensics. InquisitorH3x asks what DFIR advice you would

Jeff Hedlesky, Forensic Evangelist For Tableau Hardware, OpenText

Jeff, you've worked at OpenText and (prior to its acquisition) Guidance Software for nearly nine years. What attracted you to work here initially? Digital forensics was in its infancy back when I was working for Oxford Semiconductor in the early