Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 20 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

What’s Happening In Forensics – Jan 9, 2020

Marshall University’s new digital forensics lab is under preparation. Submissions are open for HTCIA 2020. OccupyTheWeb shows how to analyse the Windows registry for evidence.

Forensic Acquisition Of Modern Evidence

Dr. Bradley Schatz presents a roadmap to what's changed in digital forensics at DFRWS EU 2019. Bradley: OK, good afternoon. Thank you all for coming to this session. My name is Bradley Schatz, and today I would like to talk

Forensic Acquisition Of Modern Evidence

Dr. Bradley Schatz presents a roadmap to what’s changed in digital forensics at DFRWS EU 2019.Bradley: OK, good afternoon. Thank you all for coming to this session. My name is Bradley Schatz, and today I would like to talk with

Register For Webinar: Real-Time Corporate Investigations

Employee misconduct and unethical behaviour can have devastating effects on a company, from loss of revenue, to reputational damage, the burden of paying settlement costs and resulting fines, additional regulation, and even total closure of the company. In the age

What’s Happening In Forensics – Jan 8, 2020

Mike Brewer shares some tips on learning cloud forensics for free. Petr Stuchlík shares his first article in a series about network forensics. Free Autopsy training is now available for law enforcement. Paraben share a tutorial on forensic artifacts that

How To Use Apple Pattern-of-Life Data In Your Investigations

BlackLight and APOLLO: How to Use Apple Pattern-of-Life Data in Your Investigations BlackLight’s latest release, BlackLight 2019 R3, now has APOLLO framework built in as a plugin to make it even easier for investigators to get the most out of

Jason Bailey, Director Of Product Management, OpenText

Jason, can you tell us a bit about yourself and how you got into digital forensics? Absolutely. I started in the digital forensic industry in 2005 and a friend of mine started a company called Tableau LLC back at the

What’s Happening In Forensics – Jan 7, 2020

Ryan Benson shares a handy tip about UUIDs. Daniel Milnes takes a look at HSTS for forensics. ADF’s Rich Frawley demonstrates best practices in fraud investigations. Patrick Siewert from Pro Digital Forensics talks about cellular provider call detail records analysis

What’s Happening In Forensics – Jan 6, 2020

Didier Stevens analyses some unusual zip files. Andrew Case will be presenting “Volatility 3 Public Beta: A Peek into the Future of Memory Forensics” at the Art into Science conference in Austin TX on Jan 15. Phil Stokes shares some

How To Analyze Call Data Records In Oxygen Forensic Detective

Hi, this is Amanda Mangan with Oxygen Forensics. In this video, we’re going to go over Oxygen Forensics’ Call Data Expert. The first thing we’ll discuss is, what exactly is a CDR? A CDR is a call data record, and

How To Analyze Call Data Records In Oxygen Forensic Detective

Hi, this is Amanda Mangan with Oxygen Forensics. In this video, we’re going to go over Oxygen Forensics’ Call Data Expert. The first thing we’ll discuss is, what exactly is a CDR? A CDR is a call data record, and