Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
22nd October 2026

Detego Global Strengthens Its Presence In Brazil With Detego Day São Paulo 2026
Hero Image

Join Detego Global in São Paulo on 26 November 2026 for an exclusive event showcasing cutting-edge digital forensics, AI-powered evidence analysis, and investigation management solutions designed to help investigators uncover critical evidence faster....

Read More

Today's headlines 22 Oct 2026

More news →

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence

How Semantics 21 Is Changing The Way Investigators Work With Digital Evidence

21st October 2026

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools....read more

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

Passware Kit 2026 v4 Simplifies BitLocker Decryption And Adds E01 Export

21st October 2026

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support....read more

Investigating WMI Permanent Event Subscription Persistence

Investigating WMI Permanent Event Subscription Persistence

19th October 2026

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup....read more

Matt McFadden, Director of Training, BlackBag Technologies

Matt, you've recently been appointed Director of Training at BlackBag Technologies. Tell us about your role and what it involves. The role of Director of Training involves working with many of the teams here at BlackBag. Primarily, I have the

Using Santa To Augment Forensic Investigations

Gary: Hi. The title of this talk is ‘He’s Making a List, and We’re Checking it Twice: Santa for Forensic Analysis’. I want to point out that it was very difficult coming up with this title. We had many runner-ups,

Using Santa To Augment Forensic Investigations

James Nettesheim and Gary Brown discuss their work at DFRWS EU 2018. Gary: Hi. The title of this talk is ‘He’s Making a List, and We’re Checking it Twice: Santa for Forensic Analysis’. I want to point out that it

OpenText™ Solutions For All Your Digital Investigation Needs

OpenText™ acquired Guidance Software, the provider of EnCase™ cybersecurity, digital forensic investigation and e-Discovery software solutions, in 2017 and has since continued to evolve in the digital forensics market. OpenText’s digital forensic suite comprises of EnCase™ Forensic, EnCase™ Mobile Investigator

A Forensic Framework To Identify Local Vs Synced Artifacts

Jacques: Thank you. Alright. First of all, I’ll start off by thanking U-City, thanking [An], who’s my prof, who [00:13] be here today, but actually he’s teaching in Sri Lanka, so he wasn’t able to be here. So, this presentation

A Forensic Framework To Identify Local Vs Synced Artifacts

Jacques Boucher discusses his work at DFRWS EU 2018. Jacques: Thank you. Alright. First of all, I’ll start off by thanking U-City, thanking [An], who’s my prof, who [00:13] be here today, but actually he’s teaching in Sri Lanka, so

WhatsApp Challenges: Finding Evidence With Oxygen Forensic Detective

With more than 1.5 billion users and 5.5 billion messages per day, WhatsApp is without a doubt the most popular messenger in the world. All messages sent using WhatsApp have end-to-end encryption, meaning they are unreadable if intercepted by anyone,

Forensic Examination Of Manipulated Email In Gmail

by Arman Gungor Last week, I came across an interesting post on Forensic Focus. The poster, jahearne, was asking about how one can detect manipulation of an existing email in Gmail. In his hypothetical scenario, the bad actor was using

Forensic Examination Of Manipulated Email In Gmail

by Arman Gungor Last week, I came across an interesting post on Forensic Focus. The poster, jahearne, was asking about how one can detect manipulation of an existing email in Gmail. In his hypothetical scenario, the bad actor was using

Data-Driven Approach For Automatic Telephony Threat Analysis

ElMouatez Billa Karbab discusses his work at DFRWS EU 2018. Elmouatez: Hello back. Yeah. I’m here the second author, and the first one couldn’t make it. This is why I’m presenting. Thank you. This work is entitled ‘Data-Driven Approach for