Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 21 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

What Changes Do We Need To See In eDiscovery? Part IV

by Harold Burt-Gerrans In Part 3, I introduced the concept of consolidating duplicates by tracking Metadata at a DocID level and coding and/or document actions at a Document Level. For ease, I’m duplicating part of the example charts here as

Brett Shavers On DFIR Training And Mental Health In Digital Forensics

Christa: Hello and welcome to the Forensic Focus podcast. Monthly we interview experts from the digital forensics and incident response community, on a host of topics ranging from technical aspects to soft skills. I’m your host, Christa Miller. Our inaugural

Register For Webinar – Addressing The Serious Threat Of Cybercrime

Cybercrime provides its own unique challenges. Every case of fraud, workplace harassment, insider threats, identify theft, data exfiltration, IP theft, network intrusions, malware and ransomware attacks have the potential to devastate not only individuals, but corporations of all sizes. In

Webinar: Atola TaskForce Demo

A new webinar, Atola TaskForce Demo, is available to view here. Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here. Read More

Atola TaskForce Demo

Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here. Quickstart: Your First Imaging Session First of all, let’s make sure that the drive that we are about to image is in good

Uses Of Unmanned Aerial Vehicles (UAVs) In Crime Scene Investigations

by Chirath De Alwis and Chamalka De Silva Recent advancements in technology have helped many people to have a better quality of life. Unmanned Aerial Vehicles (UAVs), also known as ‘drones’, are one such technological advancement that can help society

Uses Of Unmanned Aerial Vehicles (UAVs) In Crime Scene Investigations

by Chirath De Alwis and Chamalka De Silva Recent advancements in technology have helped many people to have a better quality of life. Unmanned Aerial Vehicles (UAVs), also known as ‘drones’, are one such technological advancement that can help society

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. How can you find login information when the user profile no longer exists? Can you help pronie2121 with a device seizure acquisition problem? How do you verify

Crimes Against Children Conference 2019 Recap Part II: Digital Evidence

By Christa Miller, Forensic Focus Our first article in this two-part series focused on the technology associated with crimes against children: mobile peer-to-peer software; cryptocurrency used to buy and sell child sexual abuse material (CSAM); the virtual worlds where abuse

TikTok Data Extraction In Oxygen Forensic Detective

What is it? TikTok, an emerging app is rapidly gaining popularity. It recently unseated Instagram, YouTube and Snapchat as the top free app in Apple’s App Store . As of Nov. 6 2018, according to industry research firm App Annie,

Comprehending The IoT Cyber Threat Landscape

Morteza Safaei Pour shares his research at DFRWS EU 2019. Morteza: Hello and good morning – my name is Morteza Safaei Pour, from CTI Lab Florida Atlantic University. Today I’m going to talk about comprehending the IoT cyber threat landscape,

Comprehending The IoT Cyber Threat Landscape

Morteza Safaei Pour shares his research at DFRWS EU 2019. Morteza: Hello and good morning – my name is Morteza Safaei Pour, from CTI Lab Florida Atlantic University. Today I’m going to talk about comprehending the IoT cyber threat landscape,

Unlock Mobile Devices Using These Popular Codes

We have collected thousands of pattern lock codes for Android using our Burner Breaker technology and we have discovered the top gesture codes used to UNLOCK Android devices. For example, the most popular pattern lock code is 3 2 5

Webinar: Timesaving Forensic Techniques For Your Next Case

A new webinar, Timesaving Forensic Techniques For Your Next Case, is available to view here. Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here. Read More

Timesaving Forensic Techniques For Your Next Case

Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here. Julie O’Shea: Hi everyone, thanks for joining today’s webinar: Timesaving Forensic Techniques For Your Next Case. My name is Julie O’Shea, and I’m