Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
21st October 2026

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence
Hero Image

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....

Read More

Today's headlines 21 Oct 2026

More news →

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

21st October 2026

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss the existence and utility of a forensic seed bank. Can you help Fra93 to check if a PDF file has been manipulated? How would

What’s Happening In Forensics – Aug 22, 2019

Magnet AXIOM 3.5 is now available. Andrea Fortuna discusses how to generate a Volatility profile for a Linux system. SANS talk about understanding the forensic science in digital forensics. MSAB release XRY 8.0.2. Amped describe how Amped FIVE is helping

Transferring A Password Recovery Process To A Different Computer

Did you know that Passware Kit can create a snapshot of a password recovery process at any time and resume it on a different computer? Running a password recovery attack, especially for multiple files or drives, might be a long

BlackBag Announces New Partnership With Berla

BlackBag Technologies announces a new partnership with industry-leading vehicle forensics company, Berla. In today’s investigations, it is now commonplace to have multiple digital devices associated to one case. As such, consolidating acquired devices is critical when reconstructing a sequence of

What’s Happening In Forensics – Aug 21, 2019

John Walsh speaks about child protection investigations at Cellebrite’s TechDay. Amped share how to use Amped FIVE's color deconvolution filter to show relevant elements from color-mixed images.

What’s Happening In Forensics – Aug 19, 2019

Harlan Carvey discusses what ‘program execution‘ really means. Brett Shavers shares how the lessons he learned in the Marine Corps inform his digital forensics career. Anuj Soni shares how to perform code analysis with Ghidra. Cellebrite share a case study

Huawei Device Support In Oxygen Forensic Detective

Oxygen Forensic Detective offers various methods of data extraction from Huawei devices. First, Huawei devices can be connected via USB cable for logical or physical acquisition depending on the model and Android OS version. However, with constantly growing device security

Interview With Nicole Odom, Forensic Scientist, Virginia DFS

Nicole, you started out in chemistry and biological sciences before moving from orthopedics to digital forensics. What prompted you to pivot into the cyber world? I actually get asked that question quite frequently, as my background has a little bit

What’s Happening In Forensics – Aug 16, 2019

Oxygen Forensics talk about the allegations that Huawei has been spying on US users. Harlan Carvey follows up with a second post on ‘chasing the DFIR cure.’

What’s Happening In Forensics – Aug 14, 2019

Cyan Forensics are partnering with NCMEC, America’s National Center for Missing and Exploited Children, to help detect child abuse material. Greg Masi shares a list of folder type identifiers.

Review: Oxygen Forensic Detective From Oxygen Forensics

by Jade James Oxygen Forensics specialise in mobile device, cloud, drone and IoT data extraction. Oxygen pride themselves in giving law enforcement, federal agencies and enterprises access to data at top speeds, providing advanced digital forensic data extraction and analytical

Oxygen Forensic Detective From Oxygen Forensics

by Jade James Oxygen Forensics specialise in mobile device, cloud, drone and IoT data extraction. Oxygen pride themselves in giving law enforcement, federal agencies and enterprises access to data at top speeds, providing advanced digital forensic data extraction and analytical

What’s Happening In Forensics – Aug 13, 2019

Harlan Carvey asks how our customers determine the accuracy of digital forensic investigations. Cellebrite announce a webinar about finding digital evidence in human trafficking investigations. Amped show how to magnify images for use in investigations.