Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
21st October 2026

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence
Hero Image

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....

Read More

Today's headlines 21 Oct 2026

More news →

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

21st October 2026

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Atola TaskForce Gets A Massive Update Including A New Compare Module

Atola TaskForce Gets A Massive Update Including A New Compare Module

19th October 2026

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows....read more

Burnout in DFIR (And Beyond)

by Christa Miller Quite a lot has been written over recent weeks about burnout. Not only DFIR-specific posts, first from Richard Bejtlich and then, in follow-up from Eric Huber and Brett Shavers; but also news articles including: • Why Are

Burnout in DFIR (And Beyond)

by Christa Miller, Forensic Focus Quite a lot has been written over recent weeks about burnout. Not only DFIR-specific posts, first from Richard Bejtlich and then, in follow-up from Eric Huber and Brett Shavers; but also news articles including: Why

Magnet Forensics Announces Magnet AUTOMATE To Complete Investigations Faster

Magnet Forensics, the global leader in digital investigation software for mobile, cloud, and computer examinations, is proud to announce Magnet AUTOMATE—an innovative new solution that allows digital forensics labs to complete investigations faster by powering a repeatable forensic workflow that

Damaged Device Forensics

Steve: I have a few things to tell you. That when we first proposed this project to DHS, it was about two, two-and-a-half years ago, and then, at that point in time, there was really little industry penetration with drone

Damaged Device Forensics

Steve Watson discusses his research at DFRWS US 2018. Steve: [ETL] was a recent technology startup, we’re a small team of engineers that are focused primarily on [embedded] technology. So, people say “You’re the drone guy, you’re the chip-off …”

BlackBag Announces Physical Decrypted Image From Macs With T2 Chip

BlackBag Technologies is proud to announce the first and only solution to produce a decrypted physical image of Apple’s latest Mac systems utilizing the T2 chip. Current logical imaging solutions, including functionality available in the previous version of BlackBag’s own

Logicube To Showcase Forensic Product Line at Techno Security San Diego

Logicube, Inc. is pleased to announce that we will be exhibiting at the upcoming Techno Security & Digital Forensics Conference, March 11-13, in La Jolla, California. Our flagship product, The Falcon®-NEO, along with our Talon® Ultimate forensic imager and our

Digital Forensic Training From Belkasoft

Great news from Belkasoft: In addition to on-site digital forensic trainings, we are adding Live Online classes on BEC 2019! We have also added more dates and locations for 2019 on-site trainings. The updated schedule is below:• 3-day Certified Training,

Styx: Countering Robust Memory Acquisition

Ralph: Welcome, everyone, and thank you for the introduction as well as having the opportunity to present our research. As mentioned, my name is Ralph Palutke, and I work as a PhD student for the Security Research Group of the

Styx: Countering Robust Memory Acquisition

Ralph Palutke discusses his work at DFRWS EU 2018. Ralph: Yeah. Welcome, everyone, and thank you for the introduction as well as having the opportunity to present our research. As mentioned, my name is Ralph Palutke, and I work as

Interview With Christa Miller, Content Manager, Forensic Focus

Christa, you’ve just joined Forensic Focus as a Content Manager – welcome on board! Tell us a bit about your background and how you came to work in digital forensics content creation. Thank you Scar! I’m coming to Forensic Focus

Christa Miller, Content Manager, Forensic Focus

Christa, you've just joined Forensic Focus as a Content Manager – welcome on board! Tell us a bit about your background and how you came to work in digital forensics content creation. Thank you Scar! I’m coming to Forensic Focus