Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 21 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Forensic Analysis Of LNK Files With Belkasoft Evidence Center

In this article, the Belkasoft Team explains what LNK files are and why they are important, where one can find them, and how to analyze them with Belkasoft Evidence Center.LNK files (labels or Windows shortcut files) are typically files which

How To Use AXIOM In Malware Investigations: Part I

Hey everyone, Tara Nelson here with Magnet Forensics. Today I’m going to give a little bit of insight into how AXIOM can help with some of your day-to-day investigations. In part one of the segment we’re going to talk a

How To Use AXIOM In Malware Investigations: Part I

Hey everyone, Tara Nelson here with Magnet Forensics. Today I’m going to give a little bit of insight into how AXIOM can help with some of your day-to-day investigations. In part one of the segment we’re going to talk a

Review: Griffeye Brain In Analyze DI Pro

by Jade James Griffeye are currently offering a free 90-day trial of their flagship product, Analyze DI Pro, which includes access to the user portal and all the resources within it. Analyze DI Pro comes with many benefits. You can

Griffeye Brain In Analyze DI Pro

by Jade James Griffeye are currently offering a free 90-day trial of their flagship product, Analyze DI Pro, which includes access to the user portal and all the resources within it. Analyze DI Pro comes with many benefits. You can

How To Export Media Files From BlackLight Into Semantics21

So before we go to export our files from BlackLight to S21, what we will normally do is we will run the hashes against our case. In this case what we’ve done is we’ve already run these hashes against BlackLight,

How To Export Media Files From BlackLight Into Semantics21

So before we go to export our files from BlackLight to S21, what we will normally do is we will run the hashes against our case. In this case what we’ve done is we’ve already run these hashes against BlackLight,

Cost-Effective Tools For Small Mobile Forensic Labs

by Alex Moeller As the costs associated with running a mobile devices forensic laboratory can be considered to be high, this article is aimed at providing alternative options for small organisations or individuals looking to reduce overheads. There are numerous

Cost-Effective Tools For Small Mobile Forensic Labs

by Alex Moeller As the costs associated with running a mobile devices forensic laboratory can be considered to be high, this article is aimed at providing alternative options for small organisations or individuals looking to reduce overheads.  Case Management Tools

Case Study: A Change In Toolset Saved Merseyside Police £36,000

BlackLight was a Winner in a Cost-Benefit Analysis of Digital Forensic ToolsDetective Sergeant James Milligan, a laboratory manager for Merseyside Police, recognized his department was facing the same issue as every digital forensic lab in the world; his budget is

Belkasoft Discusses Proper Timelines And How to Handle Them

Belkasoft has published a guide covering the capabilities of Belkasoft Evidence Center related to building and analyzing proper timelines. As the article stresses, ‘timeline is a crucial notion of digital forensics. Numerous lasting crimes are essentially sequences of actions leaving

What’s Happening In Forensics – Nov 6, 2019

Animesh Shaw shows how to use TSK and Autopsy. Jai Minton shares a handy digital forensics cheat sheet. Ted Smith shares an introduction to X-Tensions for beginners with X-Ways.

Walkthrough: What’s New In XAMN v4.4

Hello and welcome to this video about what’s new in XAMN 4.4. I’m going to take you through ten new improvements, as you can see listed here in the latest release of the XAMN application. Let’s get straight on to

Walkthrough: What’s New In XAMN v4.4

Hello and welcome to this video about what’s new in XAMN 4.4. I’m going to take you through ten new improvements, as you can see listed here in the latest release of the XAMN application. Let’s get straight on to the

VFC5: Now With Windows Live ID Exploit

First launched in 2007, VFC has recently had a major facelift. VFC5 brings you: • VFC Mount™, MD5’s proprietary, complementary mount tool, supporting .e01, .ex01, .vmdk, .bin, .img, .raw, .dd, .aff4• Command Line Interface (CLI) allows you to launch VFC