Forensic Focus

Articles

24th September 2026

Corrobora – Cross-Artifact Consistency Analysis For Windows Digital Forensics

Dielle De Noon explores the development and validation of two key components of her open-source Windows digital forensics framework and how they lay the foundation for future cross-artifact correlation....

News

How Semantics 21 Is Calling Time On Add-On Culture In Digital Forensics

23rd September 2026

Investigative capability shouldn’t be split across licences, modules and bolt-ons - S21 VisionX brings visual review, prioritisation and victim identification into one intelligence-led platform....read more

News

Magnet Forensics Expands Collaboration With NCMEC To Strengthen Victim Identification

22nd September 2026

Coming soon to Magnet Griffeye: new capabilities will enable investigators to securely share CSAM-related files, hashes and investigative information directly with NCMEC, helping streamline workflows and support faster child victim identification....read more

Interviews

Radim Motycka, Founder, Proofsnap

22nd September 2026

Why screenshots alone may not be enough: ProofSnap founder Radim Motycka explains how hashes, timestamps, WARC, network artefacts and independent verification can strengthen the preservation of web evidence....read more

Frontline Managed Services’ Kyle Campbell on DFIR & E-Discovery Skills & Pathways

18th July 2022

Christa: Electronic discovery, or e-discovery, has always required some digital forensic skills as litigators prepare to present electronic data at trial. However, as technology evolves, likewise, the skills needed to identify, collect and analyze the data that’s most relevant to

MSAB – a Major Player in IDC report on Digital Forensics

15th July 2022

MSAB, a global leader in digital forensic technology for mobile device examination and analysis, announced it has been named as a Major Player in the IDC MarketScape: Worldwide Digital Forensics in Public Safety 2022 Vendor Assessment. The report noted that

PEM: Remote Forensic Acquisition of PLC Memory in Industrial Control Systems

14th July 202214th July 2022

Winner of the Best Paper Award at DFRWS-EU 2022, Nauman Zubair proposes a new memory acquisition framework to remotely acquire a programmable logic controller (PLC)’s volatile memory while the PLC is controlling a physical process. Session Chair: Welcome Nauman, happy

When Did It Happen? Dealing With Timestamps in Amped FIVE

13th July 2022

By David Spreadborough – Forensic Video Analyst at Amped Software There are several common components within a CCTV Video file. This article from Amped Software is going to dive into the data that links the image to the time when

Passware Kit Mobile 2022 v3 – GPU-Accelerated Password Recovery for MediaTek-Based LG Smartphones

13th July 2022

What’s new in Passware Kit Mobile 2022 v3: GPU-accelerated password recovery for MediaTek-based LG devices Data extraction from applications on LG: Signal, Wickr, 1Password iOS 15.5 support Support for Apple devices with A9X chip Support for HFS+ (iOS prior to

Defining Atomicity (and Integrity) for Snapshots of Storage in Forensic Computing

12th July 2022

In this video from DFRWS-EU 2022, Jenny Ottmann revisits the discussion on quality criteria for “forensically sound” acquisition of such storage and proposes a new way to capture the intent to acquire an instantaneous snapshot from a single target system;

Introducing 2 Forensic Focus Podcast Co-Hosts: Simon Biles and Alex Desmond

11th July 202211th July 2022

Christa: Welcome to the Forensic Focus podcast. I’m your host, Christa Miller. And this week we’re switching it up a little bit. We’re introducing some new co-hosts: Simon Biles and Alex Desmond. Simon’s an IT and digital forensics expert witness

Extraction and Analysis of Retrievable Memory Artifacts From Windows Telegram Desktop Application

8th July 2022

In this video from DFRWS-EU 2022, Pedro Fernandez-Alvarez describes research focused on the Telegram Desktop client, in particular the client process contents in a Windows system’s RAM. Session Chair: We are now in the topic of memory forensics, and we

The Best Forensic Tool to Extract and Analyze Data of Drone/UAVs

8th July 2022

We are happy to release a demo video of MD-DRONE! Drone and UAVs are commonly used for public service purposes or terror and crimes are often involved with this remotely controlled mobility tool. The need for the investigation of drones

Why a UK Police Force Adopted Frontline Solutions From MSAB

7th July 2022

A woman wearing a dark shirt works on a computer at a desk, processing mobile devices

Operator: Calling all units. A2 11, 675 Main. Backup needed. Speaker 1: So we had two police forces combining their digital forensics to save money and increase efficiency. However, we soon realized we had a situation that we weren’t prepared

Bridging the Gap: Standardizing Representation of Inferences in Diverse Digital Forensic Contexts

6th July 2022

Session Chair: So the next speaker is Timothy. It’s going to be online, so Timothy, are you ready? Timothy: Hi, everyone. So I’m Timothy Bollé, I’m a PhD student at the University of Lausanne. And today I will give a

Digital Intelligence Joins Forces with Detego for a Global Webinar Series

6th July 2022

Detego Global, creators of the award-winning Unified Investigations Platform that enables investigators to rapidly extract, analyze and report on critical data from 1,000s of devices and Digital Intelligence® Inc, a leader in the delivery of digital forensics and eDiscovery technologies,

MSAB Announces Its Second Major Release for 2022: XRY 10.2, XAMN 7.2 and XEC 7.2

6th July 2022

The new releases of XRY, XAMN and XEC come with full support for more devices, more apps, Coinbase Warrant Returns, plus an early access to new features. Release Highlights XRY 10.2 XRY 10.2 brings significant extraction and decoding capabilities to

Cellebrite’s Monica Harris on Achieving Balance in Corporate Investigations and E-Discovery

5th July 2022

Christa: Digital forensics in enterprises increasingly overlaps corporate investigations, e-discovery and incident response, with the result that enterprises themselves must balance data acquisition and retention with employee privacy and cyber security. This week on the Forensic Focus podcast we’re joined

What Can You Tell Us About Your Password? A Contextual Approach

30th June 2022

Aikaterini: I’m Aikaterini Kanta. I’m a PhD candidate with University College Dublin, and I’m really glad to be here today. I’m going to talk to you about my PhD research. So, about contextual based decryption. So, the average number of

Uncovering Windows Registry Data and the Latest Mac Artifacts

29th June 2022

Julie O’Shea: Hi, everyone. Thanks for joining today’s webinar: Uncovering Windows Registry Data and the Latest Mac Artifacts. I’m Julie O’Shea and I’m the Product Marketing Manager here at Cellebrite Enterprise Solutions. Before we get started, there are a few