Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
21st October 2026

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence
Hero Image

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....

Read More

Today's headlines 21 Oct 2026

More news →

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

21st October 2026

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

My Digital Forensics Career Pathway

by Patrick Doody Let me start by introducing myself. I’m Patrick, 39 years of age and from a working-class background. I’ve lived in London all my life, my parents moved to the UK from Southern Ireland when they were young

My Digital Forensics Career Pathway

by Patrick Doody Let me start by introducing myself. I’m Patrick, 39 years of age and from a working-class background. I’ve lived in London all my life, my parents moved to the UK from Southern Ireland when they were young

Griffeye’s Latest Release Makes Large-scale Police Collaboration Possible

Griffeye, one of the world’s premier platforms for managing, building and sharing digital media intelligence, and used by law enforcement agencies across the world, today announced the release of Griffeye Intelligence Database (GID).This new database will replace the previous Griffeye

What’s Happening In Forensics

The Eclectic Light Company share a directory of all the free software that’s available via their site. Marcos Fuentes Martínez argues that the price we pay for rapid data extraction is the loss of potentially important data. Rushit Soni shows

What’s Happening In Forensics

West Midlands Police have come under fire for advertising unpaid digital forensics roles, which include looking at IIOC. Graeme Horsman shares his paper on the need for research on digital artefacts. Kristian Lars Larsen discusses the future of AI in

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Is there a generic reader for smart card forensics? Forum members discuss setupapi.offline.log. What tools would you recommend for pulling data from iCloud? Is there any way

What’s Happening In Forensics

Sytech have lost their accreditation after being discovered contracting work out to Fun Fone Shop. Alexis Brignoni talks about the Samsung My Files app. Oleg Afonin writes about the forensic implications of iOS jailbreaking on the Elcomsoft blog. Cellebrite share

What’s Happening In Forensics

Mike Evans talks about how digital forensics can be a window into the soul. MSAB’s Joel Bollo encourages us to transform the mobile forensic space from an ‘arms race’ to an opportunity. Jeffrey Wassenaar shows how Windows log files can

What’s Happening In Forensics

Jack Farley discusses forensic analysis of OpenVPN on iOS. Brett Shavers writes about the easy way to learn DFIR. The Eclectic Light Company has updated Nalaprop to parse natural language. Digital Forensics Magazine share news of a new UK initiative

How To Read A Moving Low-Quality License Plate Using Amped FIVE

Thanks to TV series and movies, people nowadays believe that when it comes to digital images and videos, everything is possible. Some of you may remember the “never-ending enhance” sequence in Blade Runner or the magic zoom they have in

What’s Happening In Forensics

Sharon D. Nelson shares her thoughts on Craig Ball's recent article about the war on ediscovery. Passware explain Bitlocker decryption. Another arrest has been made in the Darkode case. OpenText share five things they've learned since GDPR came into being.

BitLocker Decryption Explained

Decrypting BitLocker volumes or images is challenging due to the various encryption options offered by BitLocker that require different information for decryption. This article explains BitLocker protectors and talks about the best ways to get the data decrypted, even for

What’s Happening In Forensics

Sarah Edwards shares her presentation ‘Watching the Watchers‘ from Objective by the Sea. Ariel Watson discusses what blockchain means for digital evidence sharing. Bryan Ambrose demonstrates how to restore Windows sticky notes from volume shadow copies. The Digital Investigations Conference

From Crime To Court: Review Principles For UK Disclosure

by Hans Henseler UK Law Enforcement agencies are facing significant challenges related to digital evidence disclosure in criminal prosecution cases. Suspects who are charged with a crime must have access to all relevant evidence to ensure a fair trial, even

From Crime To Court: Review Principles For UK Disclosure

by Hans Henseler UK Law Enforcement agencies are facing significant challenges related to digital evidence disclosure in criminal prosecution cases. Suspects who are charged with a crime must have access to all relevant evidence to ensure a fair trial, even