Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 20 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Forensic Extraction Of Data From Mobile Apple Devices

This article examines the fundamentals of a forensic examination covering Apple mobile devices. A step-by-step guide describing the process of forensic data extraction and analysis exemplified by Apple mobile devices (iPhone) will be given below. This article will also familiarize

How To Digital Forensic Boot Scan A Mac With APFS

by Rich Frawley In this short 3-minute video, ADF’s digital forensic specialist Rich Frawley shows how to boot a MacBook Air (APFS, non-encrypted) with Digital Evidence Investigator. The ADF digital forensic team is hard at work putting the finishing touches

How To Digital Forensic Boot Scan A Mac With APFS

by Rich Frawley  In this short 3-minute video, ADF’s digital forensic specialist Rich Frawley shows how to boot a MacBook Air (APFS, non-encrypted) with Digital Evidence Investigator. The ADF digital forensic team is hard at work putting the finishing touches

What’s Happening In Forensics – Dec 2, 2019

Tim Bienvenu-Bate shows how to record video evidence with DME Forensics. Sofia Björketun from MSAB demonstrates some of the features of XAMN Elements and shows how it has replaced XACT.

Digital Forensics For National Security Symposium – Alexandria, VA

On the 10th and 11th of December 2019, the inaugural Digital Forensics For National Security Symposium will take place in Alexandria, VA, USA. Below is an overview of the subjects and speakers that will be featured at the event. Registration

Semantics 21 Welcomes New Director Of Business Development

Semantics 21® are pleased to announce the appointment of Mr. Stuart Hutchinson as the new Director of Business Development. Stuart joins Semantics 21, the developers of the multi-award winning S21® LASERi® Suite who won the 2019 Queen’s Award for Enterprise:

Belkasoft’s Webinar On New Ways To Acquire iOS Devices With BEC

Join the upcoming webinar to learn new ways to acquire iOS devices with Belkasoft Evidence Center. Brad Robin, Belkasoft’s Pre-Sales Manager and law enforcement professional, will hold a special talk dedicated to ‘Acquisition of iOS devices with Belkasoft Evidence Center

On Efficiency Of Artifact Lookup Strategies In Digital Forensics

Harald Baier presents his research at DFRWS EU 2019.Host: Hello, welcome to the last session of the day on forensic analysis techniques in general. We have a mix of three techniques here, two of them are spanning a couple of

iOS Acquisition Without Jailbreak With Belkasoft v.9.8

New version of Belkasoft Evidence Center v.9.8 is released with a number of fresh features, including significant improvements related to acquisition of iPhones and iPADs: – Acquisition of iOS devices with checkra1n jailbreak installed (No Cydia install is required!)– For

The Potential Importance Of Information From Password Managers

by Dr Tristan Jenkinson There have recently been a number of articles discussing the use of common passwords and encouraging better password practices. Most guidance includes the recommendation not to use the same password for different accounts. This makes sense

The Potential Importance Of Information From Password Managers

by Dr Tristan Jenkinson There have recently been a number of articles discussing the use of common passwords and encouraging better password practices. Most guidance includes the recommendation not to use the same password for different accounts. This makes sense

Belkasoft’s Customer Survey: Your Chance To Win A License

2019 was full of events, improvements, and upgrades for Belkasoft Evidence Center. To a great extent, our customers’ feedback was the source of these advancements. Owing to it, Belkasoft Evidence Center 2020 has become what it is now.2020 is approaching.