Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 20 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Nuix Investigate: Giving Investigators Something To Talk About

by Lisa Bailey | Nuix We’ve renamed Nuix Web Review & Analytics to underscore our commitment to providing the very best software on the market to help investigators do their work better. Introducing Nuix Investigate! NOT JUST REVIEW OR ANALYTICS

The Goldilocks Effect

by Paul Slater | NuixThe classic fairy tale Goldilocks and the Three Bears tells the story of a young child who wanders into a strange house owned by three bears in the middle of the woods. Each bear has its

Belkasoft Improves GrayKey Support In v.9.9

Belkasoft is releases the new v.9.9 of its leading computer, mobile, cloud and remote forensics tool, Belkasoft Evidence Center 2020. In the new release, the product offers improved correctness and speed of analysis of GrayKey images (and zip-based data sources

Oxygen Forensic Detective 12.1: Let AI Take A Look

Image categorization, now available in Oxygen Forensic® software, is an innovated way to bring in artificial intelligence (AI) that is capable of recognizing photos and videos containing identified information from one of twelve categories. The current categories currently supported are:

Debunking Fake Images: Fact-Check The Information In Front Of You

PALISCOPE WEBINARMonday, December 16th, 3 PM CESTSpeaker: Warren Bulmer – Police officer and online investigations specialistRegistration: Click hereWith more information being shared and distributed online than ever before, it’s important to look beneath the surface and determine whether it is

Magnet Forensics And Child Rescue Coalition Partner On Magnet OUTRIDER

Technology partnership brings cutting edge technology to CSAM-related investigations — helping law enforcement as they rescue victims and bring criminals to justice. Magnet Forensics, a global leader in the development of digital investigation software and Child Rescue Coalition (CRC), a

Walkthrough: VFC From MD5

VFC was first launched to the forensic community in 2007. It makes it easy to create a virtual machine (VM) replica of a target system, enabling an investigator to recreate and interact with the “digital crime scene”. Using accepted forensic

Walkthrough: VFC From MD5

VFC was first launched to the forensic community in 2007. It makes it easy to create a virtual machine (VM) replica of a target system, enabling an investigator to recreate and interact with the “digital crime scene”.  Using accepted forensic

Solving The Mystery Behind Imaging A Mac Computer

Join BlackBag experts for an upcoming webinar on imaging a Mac computer installed with APFS and/or a T2 secured Mac computer.As every year passes, Apple computers become more and more complex. Before any analysis of data can occur, the digital

Considerations When Investigating Data From Password Managers

by Dr Tristan Jenkinson In part one we discussed the importance that data from password managers could play in an investigation. In part two we then looked at what aspects an investigation may include from a digital forensics perspective. We

Considerations When Investigating Data From Password Managers

by Dr Tristan Jenkinson In part one we discussed the importance that data from password managers could play in an investigation. In part two we then looked at what aspects an investigation may include from a digital forensics perspective. We

Interview With Eric Oldenburg, Law Enforcement Liaison, Griffeye

Eric, when we interviewed you last year, you'd just come on board with Griffeye as Technical Liaison to law enforcement. What has the past year in this role taught you, and based on these lessons, where are you taking your