Corrobora – Cross-Artifact Consistency Analysis For Windows Digital Forensics

Hero Image

Dielle De Noon explores the development and validation of two key components of her open-source Windows digital forensics framework and how they lay the foundation for future cross-artifact correlation....

Today's headlines 25 Sep 2026

Go Beyond The Basics With XRY Kiosk From MSAB

Go Beyond The Basics With XRY Kiosk From MSAB

Go beyond the basics with XRY Kiosk - extract logical, full file system, physical and RAM data through controlled, compliant workflows built for fast frontline forensics....read more

How Semantics 21 Is Calling Time On Add-On Culture In Digital Forensics

How Semantics 21 Is Calling Time On Add-On Culture In Digital Forensics

Investigative capability shouldn’t be split across licences, modules and bolt-ons - S21 VisionX brings visual review, prioritisation and victim identification into one intelligence-led platform....read more

Magnet Forensics Expands Collaboration With NCMEC To Strengthen Victim Identification

Magnet Forensics Expands Collaboration With NCMEC To Strengthen Victim Identification

Coming soon to Magnet Griffeye: new capabilities will enable investigators to securely share CSAM-related files, hashes and investigative information directly with NCMEC, helping streamline workflows and support faster child victim identification....read more

What’s Happening In Forensics Jul 17, 2019

Sharon D. Nelson talks about how courts are struggling to interpret emojis. Terry Sweeney writes about the 10 essentials of infosec forensics. Amped introduce Authenticate update 13901, with improved social media identification and a whole host of other features. Xavier

New Forensic Focus Job Board

Forensic Focus is pleased to announce a new and improved job board for digital forensics practitioners: https://jobs.forensicfocus.com/jobs/ The board includes a range of new features, including keyword/location search and the ability to filter by position, job type, country and city.

What’s Happening In Forensics Jul 16, 2019

Michael Karsyan shows how to track printer usage with event logs. Didier Stevens has updated format-bytes.py to version 0.0.9. The first keynote has been announced for TechnoSecurity TX this year: Roman Yampolskiy will be talking about artificial intelligence and the

Register For Webinar: Oxygen Forensic Jet Engine With Facial Recognition

Come see the unbelievable innovation built into Oxygen Forensic Jet Engine. As announced at the Techno Security MB Oxygen Forensics will include in it’s flagship application the ability for investigators to categorize human faces using it’s built in facial recognition

Unreal Steganography: Using A VR Application As A Steganography Carrier

by Stuart Wilson This report focuses on the use of virtual reality as a potential steganography carrier file to avoid detection of forensic analysis applications commonly used within law enforcement. The goal is to show how a virtual reality game/environment

Unreal Steganography: Using A VR Application As A Steganography Carrier

by Stuart Wilson This report focuses on the use of virtual reality as a potential steganography carrier file to avoid detection of forensic analysis applications commonly used within law enforcement. The goal is to show how a virtual reality game/environment

What’s Happening In Forensics Jul 12, 2019

Matt talks about how to derive intelligence from LNK files. Oleg Skulkin demonstrates how to use MITRE ATT&CK for forensics. DFRWS US 2019 has begun – follow their Twitter feed for updates.

MD5 Are Excited To Announce The Launch Of VFC5 On The 15th July 2019

MD5 Ltd first launched VFC to the forensic community in 2007. As well as being the original virtualisation solution for the forensic investigator, over the last 12 years, VFC has saved crucial time and provided crucial intelligence & evidence for

Finding And Interpreting Windows Firewall Rules

by Joakim Kävrestad Determining with whom and in what way a computer has communicated can be important and interesting in several types of examinations. Communications can be an important part of analyzing if and how a computer has been remote

Finding And Interpreting Windows Firewall Rules

by Joakim Kävrestad Determining with whom and in what way a computer has communicated can be important and interesting in several types of examinations. Communications can be an important part of analyzing if and how a computer has been remote

What’s Happening In Forensics – Jul 12, 2019

The UK home secretary has announced a new technology to help combat the distribution of child abuse content online. Bryan Ambrose demonstrates how to extract pcap from a memory image. The Cybercrime Centre at the University of Cambridge is looking

BlackBag Technologies Announces New Windows® Forensic Investigations Course

BlackBag reaffirms its commitment to Windows forensics with a specialized Windows investigative course.BlackBag offers digital forensic training to meet the needs of law enforcement, military and private sector examiners. BlackBag’s courses are designed to address realistic scenarios, simulating the daily

What’s Happening In Forensics – Jul 11, 2019

Atola announce TaskForce 2019.7. F-Response V8 has been released, with improved Dropbox collection. Amped talk about why it’s important to get the order right when you’re filtering.

What’s Happening In Forensics – Jul 10, 2019

John Patzakis talks about key evidence in social media statements and what might count as an exception to the hearsay rule. The Nuix User Exchange will be taking place in September – register here. Amped have updated DVRConv. What app