23rd July 2026

Investigating Synology RAID: Reassembly & Logical Imaging With Atola TaskForce 2
Hero Image

Reconstruct Synology SHR and SHR-2 automatically, browse evidence before imaging, and acquire only the files you need with Atola TaskForce 2....

Read More
Digital Forensics Round-Up, July 22 2026

Digital Forensics Round-Up, July 22 2026

22nd July 2026

Read the latest DFIR news – SQLite tips for mobile analysts, serverless forensics, Signal database decoding, AI image detection in iLEAPP and ALEAPP, Linux timeline tooling, macOS triage updates, and more....read more

Making Media Evidence Searchable: Media Forensics With Belkasoft X

Making Media Evidence Searchable: Media Forensics With Belkasoft X

22nd July 2026

Turn thousands of photos, recordings, and videos into searchable evidence with Belkasoft X and offline AI-powered BelkaGPT, helping investigators spend less time on manual review and more time on what matters....read more

Event Recap: Forensics Europe Expo (FEE) 2026

Event Recap: Forensics Europe Expo (FEE) 2026

21st July 2026

From smart doorbells and singing toys to deepfakes and forensic digital twins, Forensics Europe Expo 2026 showed just how quickly digital evidence is evolving; read our full recap for key insights from this year's event....read more

Touch Screen Lexicon Forensics (TextHarvester / WaitList.dat)

By Barnaby Skeggs Since the release of Windows 8, and the ‘Metro’ interface, touch screen input has been implemented in a rapidly rising number of Windows devices including Microsoft Surface Pro/Book, 2-in-1s, convertible laptops and tablets. Microsoft has catered for

Touch Screen Lexicon Forensics (TextHarvester / WaitList.dat)

By Barnaby Skeggs Preamble Since the release of Windows 8, and the ‘Metro’ interface, touch screen input has been implemented in a rapidly rising number of Windows devices including Microsoft Surface Pro/Book, 2-in-1s, convertible laptops and tablets. Microsoft has catered

Improved Searching And Filtering In Magnet AXIOM

One feature enhancement in Magnet AXIOM that IEF users will appreciate is improvements in searching and filtering. In AXIOM, we’ve made searching and filtering almost instant. You can stack filters to help narrow your search criteria and swap out any

Malware Can Hide, But It Must Run

It’s October, haunting season. However, in the forensics world, the hunting of evil never ends. And with Windows 10 expected to be the new normal, digital forensics and incident response (DFIR) professionals who lack the necessary (memory) hunting skills will

Malware Can Hide, But It Must Run

by Alissa Torres, SANS Certified Instructor It’s October, haunting season. However, in the forensics world, the hunting of evil never ends. And with Windows 10 expected to be the new normal, digital forensics and incident response (DFIR) professionals who lack

Breaking the Android Puzzle with Oxygen Forensic® Detective v. 9.0

Oxygen Forensics, the worldwide developer and provider of advanced forensic data examination tools for mobile devices and cloud services, announced today that it has added a Jet-Imager module to its Oxygen Forensic® Detective product that allows users to acquire data

The “I’ve Been Hacked” Defence

by Yuri Gubanov, Oleg Afonin(C) Belkasoft Research, 2016 AbstractThis article was inspired by an active discussion in one of the forensic listservs. Original post was asking on how to fight with an argument “This is not me, this is a

The “I’ve Been Hacked” Defence

By: Yuri Gubanov, Oleg Afonin (C) Belkasoft Research, 2016 Abstract This article was inspired by an active discussion in one of the forensic listservs. Original post was asking on how to fight with an argument “This is not me, this

Arsenal Recon Launches Breakthrough Microsoft Windows Hibernation Forensic Tool

Hibernation Recon Provides Digital Forensics Experts with Unprecedented Access to Hibernation Data Arsenal Recon, digital forensics experts building powerful tools to improve the analysis of electronic evidence, announced the formal release of Hibernation Recon today. Hibernation Recon extracts valuable information

New Performance Enhancements in Magnet AXIOM Mean Faster Results

Processing Times Reduced Dramatically in AXIOM 1.0.6 By Jad Saliba, Founder and CTO at Magnet Forensics Last week, we released Magnet AXIOM version 1.0.6. This update included a number of features and fixes, but one of the main goals was

BlackBag® helps Saskatoon Police Service put a criminal behind bars

BlackBag® Technologies’ premiere digital forensic software, BlackLight® helped put a man, convicted of possessing 450 child pornography images, behind bars. Marcel Cole Beuker, whose trial was held in March of this year, claimed the images found on a hard drive

Forensic Focus Forum Round-Up

Welcome to this month’s round-up of recent posts to the Forensic Focus forums. Can you help honor_the_data work out this USB storage timestamp anomaly? Forum members discuss iPhone 4S iTunes backup encryption. Should you apply for ISO/IEC 17020 and 17025

Oxygen Forensics Speeds Up Forensic Processing of Android Devices

Oxygen Forensics, the worldwide developer and provider of advanced forensic data examination tools for mobile devices, announced today an agreement with the MITRE Corporation Technology Transfer Office that will make it possible for customers of Oxygen Forensics to take advantage

Why False Positives Are Important

By Jamie McQuaid Most forensic examiners are familiar with seeing false positives in their search or processing results. False positives will always be present in tools that conduct some form of data carving in their searching and/or processing. I often