Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence

Hero Image

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....

Today's headlines 21 Oct 2026

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Employee Turnover And Computer Forensic Analysis Best Practices

by Larry Lieb Organizations historically have struggled with addressing terminated employees’ important evidence sources such as company-issued laptops, oftentimes materially affecting the organization’s ability to deal effectively with disputes that arise after an employee leaves the company. This article will

What’s Happening In Forensics Jul 24, 2019

Belkasoft Evidence Center v9.6 supports acquisition and analysis of TikTok data. PFIC 2019 is open for registration. The SANS DFIR Summit will be taking place from tomorrow; see you there!

Webinar: Griffeye 101 – Analyze DI Pro Intro Course

A new webinar, Griffeye 101: Analyze DI Pro Intro Course, is available to view here. Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here. Read More

Griffeye 101: Analyze DI Pro Intro Course

Join the forum discussion here.View the webinar on YouTube here.Read a full transcript of the webinar here.Eric: Hello everybody. Can you guys hear me okay? Excellent. Well, good morning to those of you in my sector of the world –

What’s Happening In Forensics Jul 23, 2019

DME Forensics show how to recover inaccessible video evidence. Chris Dale interviews Susanna Blancke about foreign language ediscovery. Ryan Benson talks about deciphering browser hieroglyphics. Amped demonstrate how to verify time and place information in pictures.

How To Launch 18 Simultaneous Wiping Sessions And Reach 18TB/h Overall Speed

Thanks to its ability to perform 18 simultaneous imaging sessions, TaskForce is the most capable evidence acquisition in the forensics market. Atola’s team of engineers have equipped the device with a server-grade motherboard and CPU, thus allowing TaskForce to multitask

Apple Watch Forensics: Is It Ever Possible, And What Is The Profit?

Vladimir Katalov and Mattia Epifani discuss their research at DFRWS EU 2019.OK, hello everybody, thank you for coming, my name is Vladimir. I am from Elcomsoft Company based in Moscow, Russia. Unfortunately we’re very limited in time, so we will

Apple Watch Forensics: Is It Ever Possible, And What Is The Profit?

Vladimir Katalov and Mattia Epifani discuss their research at DFRWS EU 2019. OK, hello everybody, thank you for coming, my name is Vladimir. I am from Elcomsoft Company based in Moscow, Russia. Unfortunately we’re very limited in time, so we

Oxygen Forensics Training Promotion

Oxygen Forensics is excited to offer some great training deals that will help you make this world safer! All promos will be good only in Q3 2019 but the training attendance window is good for one year. Take a look

NVMe drive support in Atola Insight Forensic

At the beginning of July Atola Technology introduced the latest software release for Atola Insight Forensic. Version 4.13 includes a range of new features, the most anticipated of which is NVMe drive support. From now on, Insight users will be

What’s Happening In Forensics Jul 17, 2019

Sharon D. Nelson talks about how courts are struggling to interpret emojis. Terry Sweeney writes about the 10 essentials of infosec forensics. Amped introduce Authenticate update 13901, with improved social media identification and a whole host of other features. Xavier

New Forensic Focus Job Board

Forensic Focus is pleased to announce a new and improved job board for digital forensics practitioners: https://jobs.forensicfocus.com/jobs/ The board includes a range of new features, including keyword/location search and the ability to filter by position, job type, country and city.

What’s Happening In Forensics Jul 16, 2019

Michael Karsyan shows how to track printer usage with event logs. Didier Stevens has updated format-bytes.py to version 0.0.9. The first keynote has been announced for TechnoSecurity TX this year: Roman Yampolskiy will be talking about artificial intelligence and the

Register For Webinar: Oxygen Forensic Jet Engine With Facial Recognition

Come see the unbelievable innovation built into Oxygen Forensic Jet Engine. As announced at the Techno Security MB Oxygen Forensics will include in it’s flagship application the ability for investigators to categorize human faces using it’s built in facial recognition