Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 20 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

XAMN From MSAB

by Jade James MSAB specialise in providing products and services solely for mobile device forensics. The flagship product, XRY, has been used for decades by forensic examiners and investigators to extract data quickly and efficiently, and now XAMN can be

Investigating Nonconsensual Intimate Image Sharing

by Christa Miller, Forensic Focus Nonconsensual intimate image sharing – also known as image-based sexual abuse, nonconsensual pornography, or its original slang, “revenge porn” – has been around since at least the 1980s, but didn’t become a widespread social problem

Investigating Nonconsensual Intimate Image Sharing

by Christa Miller, Forensic Focus Nonconsensual intimate image sharing – also known as image-based sexual abuse, nonconsensual pornography, or its original slang, “revenge porn” – has been around since at least the 1980s, but didn’t become a widespread social problem

Interview With Raphael Bousquet, CTO, ADF Solutions

Raphael, tell us about how you first got into digital forensics, and the evolution you've seen in the field since you founded ADF Solutions. My background is in computer science. I discovered computers at a very young age and have

Raphael Bousquet, CTO, ADF Solutions

Raphael, tell us about how you first got into digital forensics, and the evolution you've seen in the field since you founded ADF Solutions. My background is in computer science. I discovered computers at a very young age and have

How To Search For Visual Data With Griffeye Analyze DI

In this video, we’re going to discuss how to use the ‘Search’ function to help you quickly locate files of interest within your case. Analyze DI allows users to search for not only text-based information, but also visual clues as

How To Search For Visual Data With Griffeye Analyze DI

How To Search For Visual Data With Griffeye Analyze DI
In this video, we’re going to discuss how to use the ‘Search’ function to help you quickly locate files of interest within your case. Analyze DI allows users to search for not only text-based information, but also visual clues as

Register For Webinar: What’s New In EnCase Forensic 8.10 & Mobile Investigator

OpenText™ EnCase™ Forensic and OpenText™ EnCase™ Mobile Investigator are powerful, market-leading solutions for digital forensic investigations. Watch this webinar to learn about valuable new developments in the latest releases, EnCase Forensic 8.10 and EnCase Mobile Investigator 1.06.Watch this on-demand webinar

Belkasoft Summarizes the Results of 2019 for Belkasoft Evidence Center

2019 has been an eventful year for the Belkasoft team.This article summarizes the most important upgrades and improvements related to Belkasoft Evidence Center, including: – Advanced Mobile Device Acquisition– Remote Acquisition– Incident Investigation– Cross-Case Search– Multi-User Team Edition– Graphical Timeline–

How To Extract Credential Data Using KeyScout

Hello, this is Keith Lockhart from Oxygen Training, and this video is going to discuss the KeyScout application. The KeyScout application is one of the tools available in the tool suite concept of the Forensic Detective product. KeyScout is a

How To Extract Credential Data Using KeyScout

Hello, this is Keith Lockhart from Oxygen Training, and this video is going to discuss the KeyScout application. The KeyScout application is one of the tools available in the tool suite concept of the Forensic Detective product. KeyScout is a

Review: Digital Evidence Investigator PRO From ADF

by Jade James ADF Digital Evidence Investigator PRO (DEI PRO) is a multi-purpose tool which can be used to collect files and artifacts on a multitude of digital devices, including computers, laptops, mobile devices and removable media. It includes all

Digital Evidence Investigator PRO From ADF

by Jade James ADF Digital Evidence Investigator PRO (DEI PRO) is a multi-purpose tool which can be used to collect files and artifacts on a multitude of digital devices, including computers, laptops, mobile devices and removable media. It includes all

How To Perform A Link Screen Capture On DataPilot 10

Hi guys, my name is Jeremy Kirby. I’m Director of Sales here at Susteen. I quickly wanted to talk about the link screen functionality of the Data Pilot 10.What you’re looking at right now is an actual iPhone that is