Corrobora – Cross-Artifact Consistency Analysis For Windows Digital Forensics

Hero Image

Dielle De Noon explores the development and validation of two key components of her open-source Windows digital forensics framework and how they lay the foundation for future cross-artifact correlation....

Today's headlines 25 Sep 2026

Go Beyond The Basics With XRY Kiosk From MSAB

Go Beyond The Basics With XRY Kiosk From MSAB

Go beyond the basics with XRY Kiosk - extract logical, full file system, physical and RAM data through controlled, compliant workflows built for fast frontline forensics....read more

How Semantics 21 Is Calling Time On Add-On Culture In Digital Forensics

How Semantics 21 Is Calling Time On Add-On Culture In Digital Forensics

Investigative capability shouldn’t be split across licences, modules and bolt-ons - S21 VisionX brings visual review, prioritisation and victim identification into one intelligence-led platform....read more

Magnet Forensics Expands Collaboration With NCMEC To Strengthen Victim Identification

Magnet Forensics Expands Collaboration With NCMEC To Strengthen Victim Identification

Coming soon to Magnet Griffeye: new capabilities will enable investigators to securely share CSAM-related files, hashes and investigative information directly with NCMEC, helping streamline workflows and support faster child victim identification....read more

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Can you recommend an acquisition tool for Proton Mail? Forum members discuss forensic analysis of a ransomware attack. Can you help cs1337 to extract WeChat data that

What’s Happening In Forensics Jul 25, 2019

Magnet AXIOM 3.4 is now available for download, with new Mac updates and wellness features for ICAC investigators. Alissa Torres shares all you need to know about SANS FOR508: Advanced Incident Response, Threat Hunting & Digital Forensics. Oleg Afonin shows

Employee Turnover And Computer Forensic Analysis Best Practices

by Larry Lieb Organizations historically have struggled with addressing terminated employees’ important evidence sources such as company-issued laptops, oftentimes materially affecting the organization’s ability to deal effectively with disputes that arise after an employee leaves the company. This article will

Employee Turnover And Computer Forensic Analysis Best Practices

by Larry Lieb Organizations historically have struggled with addressing terminated employees’ important evidence sources such as company-issued laptops, oftentimes materially affecting the organization’s ability to deal effectively with disputes that arise after an employee leaves the company. This article will

What’s Happening In Forensics Jul 24, 2019

Belkasoft Evidence Center v9.6 supports acquisition and analysis of TikTok data. PFIC 2019 is open for registration. The SANS DFIR Summit will be taking place from tomorrow; see you there!

Webinar: Griffeye 101 – Analyze DI Pro Intro Course

A new webinar, Griffeye 101: Analyze DI Pro Intro Course, is available to view here. Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here. Read More

Griffeye 101: Analyze DI Pro Intro Course

Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here.Eric: Hello everybody. Can you guys hear me okay? Excellent. Well, good morning to those of you in my sector of the world –

What’s Happening In Forensics Jul 23, 2019

DME Forensics show how to recover inaccessible video evidence. Chris Dale interviews Susanna Blancke about foreign language ediscovery. Ryan Benson talks about deciphering browser hieroglyphics. Amped demonstrate how to verify time and place information in pictures.

How To Launch 18 Simultaneous Wiping Sessions And Reach 18TB/h Overall Speed

Thanks to its ability to perform 18 simultaneous imaging sessions, TaskForce is the most capable evidence acquisition in the forensics market. Atola’s team of engineers have equipped the device with a server-grade motherboard and CPU, thus allowing TaskForce to multitask

Apple Watch Forensics: Is It Ever Possible, And What Is The Profit?

Vladimir Katalov and Mattia Epifani discuss their research at DFRWS EU 2019.OK, hello everybody, thank you for coming, my name is Vladimir. I am from Elcomsoft Company based in Moscow, Russia. Unfortunately we’re very limited in time, so we will

Apple Watch Forensics: Is It Ever Possible, And What Is The Profit?

Vladimir Katalov and Mattia Epifani discuss their research at DFRWS EU 2019. OK, hello everybody, thank you for coming, my name is Vladimir. I am from Elcomsoft Company based in Moscow, Russia. Unfortunately we’re very limited in time, so we

Oxygen Forensics Training Promotion

Oxygen Forensics is excited to offer some great training deals that will help you make this world safer! All promos will be good only in Q3 2019 but the training attendance window is good for one year. Take a look

NVMe drive support in Atola Insight Forensic

At the beginning of July Atola Technology introduced the latest software release for Atola Insight Forensic. Version 4.13 includes a range of new features, the most anticipated of which is NVMe drive support. From now on, Insight users will be