Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 20 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Forensic Focus Legal Update December 2019 – Part II: Search And Seizure

by Christa Miller In cooperation with the National White Collar Crime Center (NW3C) and SEARCH, The National Consortium for Justice Information and Statistics, Forensic Focus offers a quarterly roundup of the latest legal developments around digital forensic evidence. Comprising major

Forensic Focus Legal Update December 2019 – Part II: Search And Seizure

by Christa Miller In cooperation with the National White Collar Crime Center (NW3C) and SEARCH, The National Consortium for Justice Information and Statistics, Forensic Focus offers a quarterly roundup of the latest legal developments around digital forensic evidence. Comprising major

Interview With Martin Westman, Product Specialist, MSAB

Martin, you've worked for MSAB for 15 years. What changes in mobile forensics stand out to you from that time? The most important one during this 15-year period would be the introduction of actual smartphones, because they were the biggest

Martin Westman, Product Specialist, MSAB

Martin, you've worked for MSAB for 15 years. What changes in mobile forensics stand out to you from that time? The most important one during this 15-year period would be the introduction of actual smartphones, because they were the biggest

Robert O’Leary, Head Of Investigations For USG & Corporate, Nuix

Robert, your career in digital forensics began in the industry's infancy. What first brought you to high tech crimes with the New Jersey State Police? I worked undercover narcotics investigations and I worked in a narcotic trafficking interdiction unit in

Passware Kit 2020v1: Dictionary Manager and Support for VeraCrypt GPT

Passware Kit 2020 v1 introduces a built-in Dictionary Manager, support for VeraCrypt GPT system encryption, and optimized decryption process for hard drives. The new version also extracts passwords from Windows 10/8 standalone systems protected with Windows Hello: PIN and Picture

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. How would you recover a $J file from a UsnJrnl file in a shadow copy? Forum members discuss containing and recovering a malware infected server. Share your

How To Parse AirDrop Artifacts In Magnet AXIOM

Hey everyone, Trey Amick from Magnet Forensics here. Today we’re going to be looking at a new set of artifacts specific to Mac investigations, which will be released as part of the AXIOM 3.8 release. Today we’re going to be

How To Parse AirDrop Artifacts In Magnet AXIOM

Hey everyone, Trey Amick from Magnet Forensics here. Today we’re going to be looking at a new set of artifacts specific to Mac investigations, which will be released as part of the AXIOM 3.8 release. Today we’re going to be

Forensic Focus Legal Update December 2019 – Part I

by Christa Miller In cooperation with the National White Collar Crime Center (NW3C) and SEARCH, The National Consortium for Justice Information and Statistics, Forensic Focus is proud to offer a quarterly roundup of the latest legal developments around digital forensic

Forensic Focus Legal Update December 2019 – Part I

by Christa Miller  In cooperation with the National White Collar Crime Center (NW3C) and SEARCH, The National Consortium for Justice Information and Statistics, Forensic Focus is proud to offer a quarterly roundup of the latest legal developments around digital forensic

Interview With Stefano Bianchi, Amped Software

Stefano, tell us about your multiple roles as Trainer, Software Developer and Technical Support at Amped. What does a typical workday look like for you? My workday is quite unpredictable so this question is rather hard to answer! My day

Stefano Bianchi, Amped Software

Stefano, tell us about your multiple roles as Trainer, Software Developer and Technical Support at Amped. What does a typical workday look like for you? My workday is quite unpredictable so this question is rather hard to answer! My day

BlackBag Announces Release Of BlackLight 2019 R3

BlackLight 2019 R3 is released! This release includes new integrations and updates to allow BlackLight to work seamlessly with other tools essential to your forensic toolkit. BlackBag has enhanced features added earlier this year to make them even more powerful

Webinar: New Triage Capabilities In BlackLight

A new webinar, New Triage Capabilities In BlackLight, is available to view here. Join the forum discussion here.<BR>View the webinar on YouTube here.<BR>Read a full transcript of the webinar here.