Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
21st October 2026

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence
Hero Image

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....

Read More

Today's headlines 21 Oct 2026

More news →

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

21st October 2026

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

BlackBag Releases BlackLight 2019 R1 With Powerful New Features

BlackLight 2019 R1 is officially released! There are several important updates, improvements and new features that BlackBag is excited for customers to take on their next case.Enhancements to the go-to forensic analysis tool include:• Built-in Image Categorization using Image Analyzer•

Belkasoft Evidence Center 9.5 Aims To Help In Corporate Investigations

Belkasoft releases a major update to Belkasoft Evidence Center, the company’s flagship digital forensic solution. The new release adds a number of features to help IT security staff analyze incidents and perform remote investigations, investigate hacking attempts and analyze evidence

Magnet Forensics Releases New Free Tool: MAGNET App Simulator

Magnet Forensics is excited to share a new free tool with the digital forensics community, the MAGNET App Simulator. The MAGNET App Simulator gives visualization to Android applications found during your investigation. Allowing for the examiner to load application data

Obtaining Critical Real-Time Evidence From The Cloud

Vladimir Katalov presents his research at DFRWS EU 2018.There is quite a lot of information on the smartphone, that’s probably the most available source now for all the data, including the private data, business data, a lot of [passwords], documents,

Obtaining Critical Real-Time Evidence From The Cloud

Vladimir Katalov presents his research at DFRWS EU 2018. Vladimir: Thank you for coming. Special thanks to all competitors from Cellebrite [chuckles] for being there. [You probably won’t learn anything here.] Anyway, I’m working for ElcomSoft. The company is based

Introducing Mobile Device Investigator

With an ever increasing number of adults owning a smartphone, it is no wonder that more and more crimes now commonly require mobile device evidence collection and analysis. Mobile Device Investigator™, is a new digital investigation tool built from the

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Forum members discuss how to image a server with RAID 5. Can you recommend some good website capture applications? How would you image a Dell 5290 2

Mobile Virtual Network Operators (MVNOs) In The US

by Patrick Siewart Increasingly, cellular records and their associated location information are being used in civil litigation, where previously they were considered to be a “law enforcement only” tool. But in the age when users carry at least one smartphone

Mobile Virtual Network Operators (MVNOs) In The US

by Patrick Siewart  Increasingly, cellular records and their associated location information are being used in civil litigation, where previously they were considered to be a “law enforcement only” tool.  But in the age when users carry at least one smartphone

Oxygen Forensics Announces New Director Of Training Hire

Oxygen Forensics has announced the hire of digital forensics expert, Keith Lockhart as its Director of Training. Lockhart previously served as Vice President of Strategic Programs for AccessData Group for 15 years, leading digital forensics training solutions for Local, State,

Now Released: XRY 7.12, XAMN 4.2 And XEC Director 5.0

Today, MSAB released new versions of our product suites – XRY, XAMN and XEC – with many significant new and improved capabilities to help investigators, examiners and other users work faster, smarter and more efficiently. Among the highlights are faster

Building Stack Traces From Memory Dump Of Windows x64

Yuto Otsuki discusses his research at DFRWS EU 2018.Yuto: Thank you, chairperson. I am Yuto Otsuki, a researcher at NTT Secure Platform Laboratories in Japan. Today, I’d like to talk about building stack traces from memory dump of Windows x64.

Building Stack Traces From Memory Dump Of Windows x64

Yuto Otsuki discusses his research at DFRWS EU 2018. Yuto: Thank you, chairperson. I am Yuto Otsuki, a researcher at NTT Secure Platform Laboratories in Japan. Today, I’d like to talk about building stack traces from memory dump of Windows

Upcoming Webinar: Face Recognition in Analyze DI Pro

Date: April 25, 2019Time: 3 pm CEST (9 am EST)Registration: Click here Join us for this highly anticipated webinar and learn about one of Griffeye’s most advanced and appreciated technologies: Face Recognition in Analyze DI Pro. When dealing with millions