Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
21st October 2026

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence
Hero Image

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....

Read More

Today's headlines 21 Oct 2026

More news →

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

21st October 2026

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Now Released: XRY 8.1, XAMN 4.4 and XEC 5.2

With significant advances in extraction and decoding speeds, first-to-market support for the official iOS 13 release, new mobile app extraction capabilities and much more. Today’s release of new versions of XRY, XAMN and XEC gives mobile forensic examiners, investigators and

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members help a student with ISO 17025 data sets. Why do some files have Last Accessed metadata, but no other metadata? Can you explain why a

What’s Happening In Forensics – Sep 26, 2019

Andrea Fortuna talks about analysing Windows recycle bin artifacts. Cerbero release Cerbero Suite 3.4. Lenny Zeltzer discusses malware analysis on the SANS blog. Cellebrite’s Joanna Shemesh talks about how their tools solve encryption challenges on Apple and Android devices.

Brett Shavers: I Took Belkasoft Evidence Center For A Spin Around the Block

Brett Shavers from DFIR.training reviewed Belkasoft Evidence Center (BEC). The review was dedicated to the latest version of BEC as an all-in-one digital forensic solution, which supports mobile and computer forensics as well as memory, cloud, and remote investigations. Among

Kathy Helenek, Senior Forensic Examiner, Gillware

Kathy, you're a Senior Forensic Examiner and eDiscovery Specialist at Gillware. Tell us more about your role – what does a typical day look like for you? Each day I’m interacting with clients, whether it be scoping for a new

What’s New In BlackBag’s Latest Release Of BlackLight 2019 R2

BlackLight 2019 R2 is packed full of powerful features you need to complete your investigations more quickly. This release includes new methods to find and export data how and where you need it. From partnerships to connect BlackLight with other

Interview With Guillermo Román Ferrero, Incident Response Expert

Guillermo, how did you become interested in digital forensics? I started studying digital forensics when I was still at university with a specific course on the matter. I found it very interesting to be able to investigate what an attacker

Guillermo Román Ferrero, Incident Response Expert

Guillermo Román Ferrero works as an Incident Response Expert for a Computer Security Incident Response Team. He is also a prolific author with his Follow the White Rabbit blog. Mr. Ferrero tried Belkasoft's digital forensics solutions recently and kindly agreed

What’s Happening In Forensics – Sep 23, 2019

Antonio Sanz provides a writeup of Defcon DFIR CTF: Memory Forensics. Salt4n6 talks about the forensic implications of Swipe to Type. Devon Ackerman reports how 281 people have been arrested for their participation in Business Email Compromise schemes. Cellebrite’s Shahar

What’s Happening In Forensics – Sep 19, 2019

MSAB share a white paper detailing four critical success factors in mobile forensics. Cellebrite’s Joanna Shemesh talks about how digital intelligence can help solve the problem of knife crime in England. SalvationDATA share a case study showing how to retrieve

BlackBag Now Provides Law Enforcement Agencies With AI-Based Image Recognition

BlackBag assists law enforcement agencies with AI based image recognition technology to help with child abuse investigations in the latest release of BlackLight. The significant advances in neural networks and AI based computer recognition allows machines to accurately recognize and