Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
19th October 2026

Investigating WMI Permanent Event Subscription Persistence
Hero Image

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....

Read More

Today's headlines 21 Oct 2026

More news →

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

16th October 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

The Forensic Focus State Of DFIR Survey Is Now Open

The Forensic Focus State Of DFIR Survey Is Now Open

15th October 2026

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...read more

Webinar: Get The Most Out Of Your Digital Media Investigations

Training experts’ tips & tricks webinar (find out more about the speakers here)Date: October 23, 2019Time: 3 pm CEST (9 am EDT)Registration: Click hereIn this webinar, Griffeye’s training experts will walk you through a session packed with their best tips

What’s Happening In Forensics – Oct 14, 2019

Igor Mikhailov shares his thoughts on the best digital forensic tools. Atola give a demo of their TaskForce tool. Sarah Edwards and Heather Mahalik share a presentation about auto forensics. Matt Edmondson takes a quick look at MDXFIND. The US

What Changes Do We Need To See In eDiscovery? Part II

by Harold Burt-Gerrans Let’s continue from where we left off last time, discussing standardization. If you missed it, Part 1 was all about establishing standards. Now a bit about following standards. This will sound funny to those who know what

What Changes Do We Need To See In eDiscovery? Part II

by Harold Burt-Gerrans Let’s continue from where we left off last time, discussing standardization. If you missed it, Part 1 was all about establishing standards. Now a bit about following standards. This will sound funny to those who know what

A New Opening For Accessing iPhone Data

By: Joel Bollö, CEO of MSAB The mobile forensic market is constantly changing, and changing rapidly. The latest example of that occurred very recently with the publication of a new exploit for the iPhone, the “checkm8” bootrom exploit. The announcement

DFRWS Submission Deadline Extended To Sunday October 13th

If you have been planning to submit a paper to DFRWS EU 2020, the submission deadline has been extended to this Sunday, October 13th. The event will be held on 25-27th March 2020 in Oxford, UK. Papers are welcomed on

Walkthrough: Talon Ultimate From Logicube

Welcome to Logicube’s tutorial on the Talon Ultimate. Featuring Logicube’s advanced technology, the Talon Ultimate provides high-performance forensic imaging at a price point that fits budget-constrained organisations without sacrificing state-of-the-art features and benefits. The Talon Ultimate achieves speeds of up

Walkthrough: Talon Ultimate From Logicube

Welcome to Logicube’s tutorial on the Talon Ultimate. Featuring Logicube’s advanced technology, the Talon Ultimate provides high-performance forensic imaging at a price point that fits budget-constrained organisations without sacrificing state-of-the-art features and benefits. The Talon Ultimate achieves speeds of up

Oxygen Forensics Launches Oxygen Forensic Detective 12.0 – Powered By JetEngine

Oxygen Forensics today announced the release of Oxygen Forensic Detective 12.0, Powered by JetEngine. The new release completely overhauls the program’s interface, giving Oxygen Forensics’ flagship software a new look and feel—including a multi-tab interface to seamlessly handle multiple extractions—while

Register For Webinar – Belkasoft 2020 v. 9.7: What Is New?

In v.9.7, the Belkasoft team significantly expands BEC support of various mobile data sources and adds support for more operating systems in its Remote Forensics module. As for the more specific improvements to be highlighted during the webinar, the following