Forensic Focus

3rd September 2026

“The Skills And Resilience To Do One Of The Hardest Jobs In Policing” — Why This DFIR Recruitment Language Gets The Evidence Wrong

Does recruiting for “resilience” risk putting responsibility in the wrong place? Paul Gullon-Scott looks at what the evidence says about digital forensic well-being, workload and organisational support, and why the language we use matters....

News

Forensic Focus Digest, September 04 2026

4th September 2026

Discover what’s new on Forensic Focus – explore practical ways to tackle forensic backlogs with Atola Technology, learn best practices for AI-assisted investigations with Cellebrite, and more....read more

News

Belkasoft Named A Major Player In The IDC MarketScape: Worldwide Digital Forensics Platforms 2026 Vendor Assessment

3rd September 2026

Belkasoft has been named a Major Player in the IDC MarketScape: Worldwide Digital Forensics Platforms 2026 Vendor Assessment - a milestone that reflects the maturity of Belkasoft X and the company's continued innovation in AI-powered digital forensics....read more

Videos

Cellebrite Genesis: Turn Digital Evidence Into Actionable Leads In Minutes

3rd September 2026

See how Cellebrite Genesis uses agentic AI to help enterprise investigative teams cut through complex digital evidence, uncover connections, and move from data to actionable leads in minutes....read more

Why Are Prefetch Files Important to Your Digital Forensics Investigations?

25th May 202025th August 2014

Prefetch files are great artifacts for forensic investigators trying to analyze applications that have been run on a system. Windows creates a prefetch file when an application is run from a particular location for the very first time. This is

Computer Crime or Legitimate Research?

25th May 202022nd August 2014

One researcher digs into Windows, discovers a flaw (and a fix), and receives $100,000 from Microsoft. Another, threatened with prosecution for alleged hacking, becomes despondent and takes his own life. At the Black Hat 2014 conference, an all-star panel discussed

Oxygen Forensic® Passware® Analyst Acquires Protected Mobile Devices Data

25th May 202020th August 2014

Oxygen Forensics announces the release of Oxygen Forensic® Passware® Analyst, a new mobile forensic tool integrating Oxygen’s award-winning acquisition and analytic tools with Passware’s password recovery and data extraction. The new tool integrates mobile acquisition, data extraction, password recovery and

Forensic Focus Forum Round-Up

25th May 202019th August 2014

Welcome to this round-up of recent posts to the Forensic Focus forums. A forum member unearths a very old hard drive; how can it be analysed? Is it possible to retrieve IP information by logging into a Hotmail account? Forum

Why are LNK Files Important to Your Digital Forensics Investigation?

25th May 202018th August 2014

LNK files are excellent artifacts for forensic investigators who are trying to find files that may no longer exist on the system they’re examining. The files might have been wiped or deleted, stored on a USB or network share, so

Interview with Emlyn Butterfield, Course Leader, Leeds Metropolitan University

25th May 202014th August 2014

Emlyn, you’re currently Course Leader in Computer Forensics, Security & Ethical Hacking at Leeds Metropolitan University. Could you tell us more about the role and how you entered academia? As course leader it is my responsibility to maintain a healthy

Emlyn Butterfield, Course Leader in Computer Forensics, Leeds Metropolitan University

19th May 202014th August 2014

How to Analyze USB Device History in Windows

25th May 202012th August 2014

Whether you’re a corporate examiner working an intellectual property theft, or a law enforcement investigator searching for illicit images, most forensic examiners have investigated the USB device history of a computer. There are five key pieces of information that need

Tor attack may have unmasked dark net users

25th May 20207th August 2014

Developers of software used to access Tor – an otherwise hard-to-reach part of the internet – have disclosed that an attack on the network may have unmasked users for five months. The Tor Project said that it believed the assault

New Blog Series – A Deep Dive: IEF Business Apps & OS Artifacts Module

25th May 20206th August 2014

Internet artifacts are only a subset of the potential evidence that can be found on mobile devices and computers. Internet Evidence Finder (IEF), from Magnet Forensics, now recovers more evidence in just one search with the new Business Applications &

Arnim Eijkhoudt, Lecturer in Digital Forensics, University of Applied Sciences

25th May 20205th August 2014

Arnim, please tell us about your role as a lecturer in digital forensics, and how you first became interested in the field. I’ve been fascinated with ‘tinkering’ with computers from a young age: figuring out why things (don’t) work, reverse-engineering,

Arnim Eijkhoudt, Lecturer in Digital Forensics, University of Applied Sciences

19th May 20205th August 2014

EnCase 7.10: Better Visibility, Simpler Reporting, More Flexible

25th May 20204th August 2014

For more than 15 years, EnCase has empowered investigators by exposing data invisible to most tools and putting this data at the investigator’s fingertips with flexible, accessible analysis and reporting. EnCase 7.10 is built to continue this tradition. EnCase 7.10

“The Skills And Resilience To Do One Of The Hardest Jobs In Policing” — Why This DFIR Recruitment Language Gets The Evidence Wrong

Forensic Focus Digest, September 04 2026

Belkasoft Named A Major Player In The IDC MarketScape: Worldwide Digital Forensics Platforms 2026 Vendor Assessment

Cellebrite Genesis: Turn Digital Evidence Into Actionable Leads In Minutes

Why Are Prefetch Files Important to Your Digital Forensics Investigations?

Computer Crime or Legitimate Research?

Oxygen Forensic® Passware® Analyst Acquires Protected Mobile Devices Data

Forensic Focus Forum Round-Up

Why are LNK Files Important to Your Digital Forensics Investigation?

Interview with Emlyn Butterfield, Course Leader, Leeds Metropolitan University

Emlyn Butterfield, Course Leader in Computer Forensics, Leeds Metropolitan University

How to Analyze USB Device History in Windows

Tor attack may have unmasked dark net users

New Blog Series – A Deep Dive: IEF Business Apps & OS Artifacts Module

Arnim Eijkhoudt, Lecturer in Digital Forensics, University of Applied Sciences

Arnim Eijkhoudt, Lecturer in Digital Forensics, University of Applied Sciences

EnCase 7.10: Better Visibility, Simpler Reporting, More Flexible

Understanding Cyber Bullying – Notes for Digital Forensics Examiners

Understanding Cyber Bullying – Notes for Digital Forensics Examiners

PFIC Agenda Announced: Innovation is King at PFIC 2014