20th August 2025

Digital Forensics Round-Up, August 20 2025
Hero Image

Read the latest digital forensics news – SANS releases DFIR Summit playlist, UAC launches v3.2.0, Neal Ysart discusses the Coalition of Cyber Investigators, and more....

Read More
Wrapping Up The S21 Transcriber Spotlight Session – What We’ve Covered

Wrapping Up The S21 Transcriber Spotlight Session – What We’ve Covered

20th August 2025

Explore S21 Transcriber: a fully offline, court-ready tool with free 30-day access and training....read more

UPCOMING WEBINAR – Retail Under Siege: Fighting Back Against Ransomware With Next-Gen Forensics

UPCOMING WEBINAR – Retail Under Siege: Fighting Back Against Ransomware With Next-Gen Forensics

19th August 2025

Retailers face rising cyber threats—join Exterro's Sept 4 webinar to learn fast, modern forensic response strategies and protect your brand....read more

Digital Forensics Jobs Round-Up, August 18 2025

Digital Forensics Jobs Round-Up, August 18 2025

18th August 2025

Explore a selection of the latest DFIR employment opportunities in this week’s Forensic Focus jobs round-up....read more

Forensic Focus Forum Round-Up

Welcome to this round-up of recent posts to the Forensic Focus forums.Is there a piece of software that will load an FTK filelist CSV and display it as a tree? Forum members discuss the difficulties with playing or converting .stream

US National Computer Forensics Institute provides training for cops

Ever since the news of the massive data breach of Target Corporation, people across the country have been watching the details unfurl. Consumers want to know if their accounts are affected, IT and security professionals are waiting to learn precisely

Oxygen Forensic Suite 2014 6.0 Targets Gang Crime with Evidence Cross-Analysis

Oxygen Forensics releases a major update to its flagship mobile evidence discovery solution, Oxygen Forensic Suite 2014, implementing advanced cross-analysis of evidence collected from multiple mobile devices. Version 6.0 implements new visualization options to chart all connections and communications between

DigitalFIRE Mutual Legal Assistance Study

Please help DigitalFIRE Labs understand the current state of Mutual Legal Assistance Requests relating to digital evidence, and be entered for a chance to win a FIREBrick write-blocker or an Amazon gift card. The survey on Mutual Legal Assistance Requests

Passware Enhances FileVault2 Decryption, 2x faster GPU Performance

Mac FileVault2 passwords now recoverable at a high speed, in addition to Passware’s previously announced live memory analysis solution. Passware, Inc., a provider of password recovery, decryption, and electronic evidence discovery software for computer forensics, law enforcement organizations, government agencies,

Forensic Focus Forum Round-Up

What is the future of digital forensics? Chime in on the forum. Forum member joakims has provided an open-source example of how data can be hidden within NTFS system files. Interpreting shellbags using TZWorks can yield confusing results. Bypassing Android

Is Your Computer Forensics Investigation A Symphony Or A Circus?

Digital forensics is changing, and you should be prepared for more of it in the future, not less. The increase of cloud computing has, in some ways, reduced the instances of hard drive analyses, but the explosion in mobile devices

JOB VACANCY: Forensic Analysts – London, UK

IntaForensics have been operational since 2006 as a specialist service provider of digital forensics services. Our client base includes several large and small Police forces for whom we provide outsourced digital forensics, Criminal Legal defense solicitors and Litigation solicitors. Due

Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases

This article describes common approaches used for the recovery of cleared Skype histories and deleted chat logs, and discusses methods and techniques for recovering evidence from cleared and damaged SQLite databases. It is difficult to underestimate popularity of Skype. Hundreds

Forensic analysis of the ESE database in Internet Explorer 10

———————————————————— Due to me not being able to reformat our thesis in a good way I strongly suggest you look at the whole paper in PDF format here: http://hh.diva-portal.org/smash/get/diva2:635743/FULLTEXT02.pdf /Philip ———————————————————— Forensic analysis of the ESE database in Internet Explorer

JOB VACANCY: Forensic Services Director – £60k London, UK

Forensic Services Director (Executive) (Warwickshire & London Operations) (£60k + Share Option + Flexi Time + Private Health + Pension) IntaForensics are currently seeking a Board Executive to run and develop our Warwickshire and London operations. The successful candidate will

WhatsApp – discovering timestamps of deleted messages

ABSTRACT:  This is a procedure for locating and parsing deleted messages timestamps in Android WhatsApp database. I did a little reverse engineering, using the hexadecimal tool of Physical Analyzer (UFED by Cellebrite), of the database of the popular messaging app

Man In The Middle Attack: Forensics

Yes, that’s right! Mr. Upset did not post ‘I am hating my new job’ as it appears in Figure 2, instead he wrote ‘I am loving my new job’. Then how did it happen and who did it? This article