9th July 2026

Still Reviewing CCTV The Slow Way? See S21 CCTV v2.0 In Action
Hero Image

What could your team achieve if 143 hours of CCTV footage could be reviewed in just 15 minutes? Discover S21 CCTV v2.0 — offline, rapid and AI-powered video review built for frontline investigators....

Read More
From Inaccessible To Actionable: How Punjab Police Recovered Critical Evidence From Feature Phones

From Inaccessible To Actionable: How Punjab Police Recovered Critical Evidence From Feature Phones

8th July 2026

When critical evidence is locked inside feature phones or ultra-compact devices, MSAB helps investigators go further — enabling advanced mobile extraction and analysis where other forensic tools may fall short....read more

CCTV Review Has Evolved. Have You? Introducing S21 CCTV v2.0

CCTV Review Has Evolved. Have You? Introducing S21 CCTV v2.0

7th July 2026

Cut through hours of CCTV, body-worn and dashcam footage in minutes with S21 CCTV v2.0 — AI-powered, offline and secure video review built to help investigators find what matters faster....read more

Cumulative Trauma In Digital Forensics And Policing With Ben Dimmock

Cumulative Trauma In Digital Forensics And Policing With Ben Dimmock

7th July 2026

Ben Dimmock discusses psychological safety, trauma exposure, and the long-term emotional toll of working in policing and digital forensics....read more

How To Use The Griffeye Intelligence Database

Beginning with version 19, Griffeye Analyze DI Pro and Core will start using the new Griffeye Intelligence Database, or GID, to replace the legacy intelligence manager. In this video, we’re going to discuss the changes that the GID brings to

How To Use The Griffeye Intelligence Database

Beginning with version 19, Griffeye Analyze DI Pro and Core will start using the new Griffeye Intelligence Database, or GID, to replace the legacy intelligence manager. In this video, we’re going to discuss the changes that the GID brings to

Hunting For Attackers’ Tactics And Techniques With Prefetch Files

by Oleg Skulkin Windows Prefetch files were introduced in Windows XP, and since that time they have helped digital forensics analysts and incident responders to find evidence of execution. These files are stored under %SystemRoot%\Prefetch, and are designed to speed

How To Decrypt BitLocker Volumes With Passware

Decrypting BitLocker volumes or images is challenging due to the various encryption options offered by BitLocker that require different information for decryption. This article explains BitLocker protectors and talks about the best ways to get the data decrypted, even for

Hunting For Attackers’ Tactics And Techniques With Prefetch Files

by Oleg Skulkin Windows Prefetch files were introduced in Windows XP, and since that time they have helped digital forensics analysts and incident responders to find evidence of execution.  These files are stored under %SystemRoot%\Prefetch, and are designed to speed

How To Decrypt BitLocker Volumes With Passware

Decrypting BitLocker volumes or images is challenging due to the various encryption options offered by BitLocker that require different information for decryption. This article explains BitLocker protectors and talks about the best ways to get the data decrypted, even for

What’s Happening In Forensics – Nov 20, 2019

Oleg Afonin talks about the forensic analysis of Synology NAS devices. Alexis Brignoni shares a realm database storage primer for digital forensic examiners. Amped show how to resize images with Amped Replay. Passware announce a new partnership with BlackBag. OpenText

How To Use Magnet AXIOM In Mac USB Investigations

Hey everyone, Trey Amick from Magnet Forensics here. Today we’re talking about Mac USB investigations, and what happens when we’ve been alerted that a USB has been inserted into an end point. Different organisations handle USB policies differently. Some have

How To Use Magnet AXIOM In Mac USB Investigations

Hey everyone, Trey Amick from Magnet Forensics here. Today we’re talking about Mac USB investigations, and what happens when we’ve been alerted that a USB has been inserted into an end point. Different organisations handle USB policies differently. Some have

Can Your Investigation Interpret Emoji?

by Christa Miller, Forensic Focus Emoji are everywhere — including in your evidence. Used across private-messaging apps and email, social media, and even in passwords and account names, emoji are pictographic representations of objects, moods, and words. They’re a convenient

Can Your Investigation Interpret Emoji?

by Christa Miller, Forensic Focus Emoji are everywhere — including in your evidence. Used across private-messaging apps and email, social media, and even in passwords and account names, emoji are pictographic representations of objects, moods, and words. They’re a convenient

Viber Messenger Extraction In Oxygen Forensic Detective

Viber is a cross-platform voice over IP and instant messaging software operated by Rakuten. The software app is provided as freeware for Android, Apple iOS, Microsoft Windows, macOS and Linux platforms. Initially the messenger was developed in 2010 by the

French Agency Uses Chip-Off Technique To Solve A Critical Case

By: Christophe Gabay, MSAB Area Sales Manager Recovering data from mobile devices continues to bring new challenges to investigators, and using “chip-off” and Joint Test Action Group (JTAG) methods have become topics of growing interest in the law enforcement community.

What’s Happening In Forensics – Nov 19, 2019

NirSoft release a new tool, MobileFileSearch, allowing users to search files on a mobile device attached to their computer. Arman Gungor shares some updates to Forensic Email Collector. DFRWS has a brand new website – take a look and register

Walkthrough: XRY Photon Manual

XRY Photon is a solution designed for recovering smartphone app data that’s inaccessible through normal extraction techniques. Now the power of XRY Photon has been expanded to cover hundreds of additional apps, with a new manual option. Before using XRY