Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
22nd October 2026

Cellebrite Genesis vs. ChatGPT: Why You Need Purpose-Built Investigative AI
Hero Image

What sets purpose-built investigative AI apart from general-purpose LLMs? Discover how Cellebrite Genesis helps investigators analyze digital evidence with traceable findings, warrant-bound search, and secure data handling....

Read More

Today's headlines 22 Oct 2026

More news →

Forensic Focus Digest, 23 Oct 2026

Forensic Focus Digest, 23 Oct 2026

23rd October 2026

Discover what’s new on Forensic Focus: explore WMI permanent event subscription persistence with Vitalii, see how MD-RED v4 handles AI-powered mobile forensic analysis, hear how user feedback shapes new features in Amped FIVE, and more....read more

Amped Podcast Episode 4 – User Needs, Forensic Minds: How New Features Are Born

Amped Podcast Episode 4 – User Needs, Forensic Minds: How New Features Are Born

22nd October 2026

Sam Abbot, Emi Polito and Andrea Frisina go behind the scenes to show how your feedback becomes new features in Amped FIVE, Replay, Authenticate and DVRConv, and why forensic soundness always comes first....read more

MD-RED v4: AI-Powered Mobile Forensic Analysis, From Raw Evidence To Case Insight

MD-RED v4: AI-Powered Mobile Forensic Analysis, From Raw Evidence To Case Insight

22nd October 2026

See how MD-RED v4 handles growing evidence volumes with AI-based media analysis, malware scanning, CDR correlation and PC messenger data in one workflow....read more

Apple iPhone Forensics: Significant Locations

by Patrick Siewert, Principal Consultant, Pro Digital Forensic Consulting I recently attended a conference of civil litigators in Virginia. During the cocktail hour and after a very interactive CLE presentation on “Leveraging Data in Insurance Fraud Investigations”, I was talking

Apple iPhone Forensics: Significant Locations

by Patrick Siewert, Principal Consultant, Pro Digital Forensic Consulting I recently attended a conference of civil litigators in Virginia. During the cocktail hour and after a very interactive CLE presentation on “Leveraging Data in Insurance Fraud Investigations”, I was talking

Digital Forensics Resources

by Scar de Courcier One of the most frequent questions I’m asked by digital forensics students is about resources: where can they go to continue learning, where can they find out more about the industry, what are the best blogs

Digital Forensics Resources

by Scar de Courcier One of the most frequent questions I’m asked by digital forensics students is about resources: where can they go to continue learning, where can they find out more about the industry, what are the best blogs

Digital Forensics News May 2018

This is the last day to vote in the Forensic 4:Cast awards! Forensic Focus is nominated in two categories: Digital Forensic Blog of the Year, and Digital Forensic Resource of the Year. Cast your vote here. Registration is still open

Evimetry Lab Changes The Game For In-Lab Forensic Workflow

Schatz Forensic today announced Evimetry Lab, a next-generation digital forensic system for dramatically accelerating in-lab forensic workflow. The system solves the most pressing problems of policing and other mature forensic labs; getting answers faster and scaling to meet ever growing

Logicube To Showcase Next-Generation Falcon-NEO At Enfuse Conference

Logicube® Inc. will premier its next-generation digital forensic imager, Falcon-NEO at the Enfuse Conference, May 21st-23rd in Las Vegas, Nevada.The Falcon®-NEO is a future-focused solution designed to streamline forensic evidence collection processes. Delivering high performance and advanced features, the Falcon-NEO

ADR512 Testing

by Andrey Fedorov The purpose of this article is to find additional information about the capabilities, specifics, and USPs of the ADR512 Android Data Recovery program. A full description of this software can be found here. Developers from 512 BYTE,

ADR512 Testing

by Andrey Fedorov The purpose of this article is to find additional information about the capabilities, specifics, and USPs of the ADR512 Android Data Recovery program. A full description of this software can be found here. Developers from 512 BYTE,

Atola Technology Sets A New Bar For Acquisition Tools With Atola TaskForce

Today Atola Technology announced the launch of Atola TaskForce, the next generation of evidence acquisition tools. Having optimized its imaging algorithm in 2016 to match maximum speeds drives operate at, Atola now presents a system that further solves the market’s

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Is it possible to wipe BitLocker encrypted USB drives? Add your thoughts on the forum. Forum members help jblakley to recover Gmail artifacts. Would you be interested

Searching And Filtering Emails when Forensically Collecting Mailboxes

by Arman Gungor When mailboxes are forensically preserved for eDiscovery or digital forensic investigations, their contents are almost always searched and filtered. Filtering emails helps overcome time, scope and cost constraints and alleviates privacy concerns. There are two main ways

Searching And Filtering Emails When Forensically Collecting Mailboxes

Hand-drawn contacts and emails sketch with depth of field focus
by Arman Gungor When mailboxes are forensically preserved for eDiscovery or digital forensic investigations, their contents are almost always searched and filtered. Filtering emails helps overcome time, scope and cost constraints and alleviates privacy concerns. There are two main ways