Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
21st October 2026

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence
Hero Image

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....

Read More

Today's headlines 21 Oct 2026

More news →

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

21st October 2026

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Benjamin, Creator Of Metadata Interrogator

Ben, tell us a bit about yourself and how you got into digital forensics. Hello! So in terms of background, I come from predominantly a law enforcement background, although I’ve also worked in counter-fraud in the private sector too. I’ve

Sneak Peek Of Belkasoft Evidence Center (BEC) v.9.5

Belkasoft is about to roll out one of the biggest updates of its flagship digital forensic tool in last few years. The company’s BEC (Belkasoft Evidence Center), which combines mobile, computer, RAM and cloud forensics in one product, now gets

Digital Forensics News March 2019

Amped Software have launched Amped Replay, an enhanced video player for digital forensic investigations. Magnet Forensics have released AUTOMATE, a new solution that allows digital forensics labs to complete investigations faster. BlackBag’s MacQuisition will now decrypt physical images from Macs

Standardized Corpus For SQLite Database Forensics

Sven Schmitt discusses his work at DFRWS EU 2018.Sven: Thank you very much, ladies and gentlemen. Thank you for having me. I will today talk about SQLite database forensics. My name is Sven Schmitt, as Bruce introduced correctly. I am

A Standardized Corpus For SQLite Database Forensics

Sven Schmitt discusses his work at DFRWS EU 2018. Sven: Thank you very much, ladies and gentlemen. Thank you for having me. I will today talk about SQLite database forensics. My name is Sven Schmitt, as Bruce introduced correctly. I

Webinar: How To Image Macs With The T2 Chip

BlackBag Technologies is proud to announce the first and only solution to produce a decrypted physical image of Apple’s latest Mac systems utilizing the T2 chip. Current logical imaging solutions, including functionality available in the previous version of BlackBag’s own

Forensics Europe Expo London 2019 – Recap

by Jade James This article is a recap of some of the main highlights from the Forensics Europe Expo 2019, which took place in London, UK on the 5th and 6th of March. The Forensics Europe Expo has now run

Forensics Europe Expo London 2019 – Recap

by Jade James  This article is a recap of some of the main highlights from the Forensics Europe Expo 2019, which took place in London, UK on the 5th and 6th of March. The Forensics Europe Expo has now run

Building Solutions To Keep Investigators In The Job Longer

Every year law enforcement officers identify and save thousands of children around the world from sexual abuse. Technology providers are constantly working on new solutions to help solve more crimes and save more children. And importantly to help the people

Turbinia: Automation Of Forensic Processing In The Cloud

Thomas Chopitea and Aaron Peterson discuss their research at DFRWS US 2018.Thomas: It’s our first time presenting here at DFRWS. It’s also my first time and Aaron’s first time attending. So, we’re pretty excited to be here. I’m Tom, this

Turbinia: Automation Of Forensic Processing In The Cloud

Thomas Chopitea and Aaron Peterson discuss their research at DFRWS US 2018. Thomas: It’s our first time presenting here at DFRWS. It’s also my first time and Aaron’s first time attending. So, we’re pretty excited to be here. I’m Tom,

Forensic Focus Forum Round-Up

Welcome to this month's round-up of posts in the Forensic Focus forums. Can you help honor_the_data with a data recovery question on a 101 partition? BSides Bristol has put out a call for presentations. How would you log in to