Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
29th October 2026

Preparing Digital Multimedia Evidence For Court: What To Consider Before Presentation
Hero Image

Effective courtroom presentation starts with careful preparation - discover how Amped Replay helps forensic professionals prepare clear, accurate and properly documented digital multimedia evidence for court....

Read More

Today's headlines 29 Oct 2026

More news →

Explore Cellebrite’s Autumn 2026 Release: Discover What’s New

Explore Cellebrite’s Autumn 2026 Release: Discover What’s New

29th October 2026

Discover how the Cellebrite Autumn 2026 Release is transforming digital investigations with faster access to evidence, AI-powered insights and seamless collaboration....read more

Agentic AI For Digital Investigations: Matt Goeckel Introduces Cellebrite Genesis

Agentic AI For Digital Investigations: Matt Goeckel Introduces Cellebrite Genesis

27th October 2026

Cellebrite’s Matt Goeckel joins the Forensic Focus Podcast to talk about Genesis, an AI tool that lets investigators ask questions of their evidence, decode raw databases and stay within the scope of a warrant, while examiners stay in control....read more

End-To-End Digital Investigations: From First Access To Final Verdict

End-To-End Digital Investigations: From First Access To Final Verdict

27th October 2026

Discover how Magnet Forensics’ integrated platform, from Graykey and Axiom to Automate, Review and Verify, helps agencies cut backlogs, collaborate in real time and build defensible cases from first access to final verdict....read more

JOB VACANCY: Forensic Analysts – London, UK

IntaForensics have been operational since 2006 as a specialist service provider of digital forensics services. Our client base includes several large and small Police forces for whom we provide outsourced digital forensics, Criminal Legal defense solicitors and Litigation solicitors. Due

Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases

This article describes common approaches used for the recovery of cleared Skype histories and deleted chat logs, and discusses methods and techniques for recovering evidence from cleared and damaged SQLite databases. It is difficult to underestimate popularity of Skype. Hundreds

Forensic analysis of the ESE database in Internet Explorer 10

———————————————————— Due to me not being able to reformat our thesis in a good way I strongly suggest you look at the whole paper in PDF format here: http://hh.diva-portal.org/smash/get/diva2:635743/FULLTEXT02.pdf /Philip ———————————————————— Forensic analysis of the ESE database in Internet Explorer

JOB VACANCY: Forensic Services Director – £60k London, UK

Forensic Services Director (Executive) (Warwickshire & London Operations) (£60k + Share Option + Flexi Time + Private Health + Pension) IntaForensics are currently seeking a Board Executive to run and develop our Warwickshire and London operations. The successful candidate will

WhatsApp – discovering timestamps of deleted messages

ABSTRACT:  This is a procedure for locating and parsing deleted messages timestamps in Android WhatsApp database. I did a little reverse engineering, using the hexadecimal tool of Physical Analyzer (UFED by Cellebrite), of the database of the popular messaging app

Man In The Middle Attack: Forensics

Yes, that’s right! Mr. Upset did not post ‘I am hating my new job’ as it appears in Figure 2, instead he wrote ‘I am loving my new job’. Then how did it happen and who did it? This article

Webinar: Geolocation Artifacts and Timeline Analysis in Digital Forensics

Using Geolocation Artifacts and Timeline Analysis to Solve the Case: A Digital Forensics Case Study http://info.magnetforensics.com/Digital-Forensics-Case-Study-Webinar/ Date: Wednesday December 11, 2013Time: 11:00am GMT (6:00am EST)Duration: 60 mins In this webinar, Jad Saliba of Magnet Forensics will take you through a

Article: Windows 8 File History Analysis

File History is a new backup service introduced in Windows 8. By default this feature is off and to turn it on, user has to select a backup location – either a network drive or external storage media. Thus, it

Understanding Rootkits: Using Memory Dump Analysis for Rootkit Detection

Every rootkit employs a wide range of masquerading techniques to prevent its detection. Anti-virus and anti-malware tools must perform what is called, in forensic terms, “live box analysis”, performing a real-time scan of a live system. No wonder rootkits can

DFRWS Europe – 7-9 May 2014

DFRWS USA has a long history of being the foremost digital forensics research venue and has decided to hold a sister conference to bring the same opportunities to Europe. The first annual DFRWS EU conference will be held from May

Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases

Summary This article describes common approaches used for the recovery of cleared Skype histories and deleted chat logs, and discusses methods and techniques for recovering evidence from cleared and damaged SQLite databases. Introduction It is difficult to underestimate popularity of

Article: OS X Mavericks Metadata

Apple recently released the newest version of their desktop operating system, Mac OS X Mavericks. As a free update to all supported Apple desktops and laptops, a wide adoption rate was expected, and in fact it was estimated that within

Nuix and ADF Solutions partner to deliver scalable digital forensic workflows

Nuix, a worldwide provider of information management technologies, and ADF Solutions, the market leader in media exploitation and digital forensic triage tools, today announced they have formed a technology, sales and marketing partnership to combine their strengths in digital forensic

Google and Microsoft agree steps to block abuse images

Leading search engine companies Google and Microsoft have agreed measures to make it harder to find child abuse images online. As many as 100,000 search terms will now return no results that find illegal material, and will trigger warnings that

Forensic Focus Forum Round-Up

Welcome to this round-up of recent posts to the Forensic Focus forumsIs it possible to establish when an image was viewed in Firefox? A guitar pick and a sharp blade is all you need to open a NAS drive. Forum