Block Hash Scan: Illegal File Triage Completed On Site

Hero Image

See how MD-LIVE’s Block Hash Scan helps investigators identify known target files on-site without reading every file in full, and what a zero-detection result really means....

Today's headlines 2 Oct 2026

Forensic Focus Digest, October 02 2026

Forensic Focus Digest, October 02 2026

Discover what’s new on Forensic Focus – explore the biggest challenges in mobile forensics with Magnet Forensics, discover faster investigative workflows with Cellebrite Genesis, meet Radim Motycka, founder of Proofsnap, and more....read more

Passware Kit Mobile 2026 v5 Decrypts Samsung Galaxy Watch

Passware Kit Mobile 2026 v5 Decrypts Samsung Galaxy Watch

Passware Kit Mobile 2026 v5 expands mobile forensics with Samsung Galaxy Watch 4/5/6 passcode recovery and data extraction, new Samsung and Unisoc device support, Enpass for Android decryption, and faster workflows with immediate passcode recovery....read more

Trust Is Not A Feature. It Is The Foundation.

Trust Is Not A Feature. It Is The Foundation.

Discover what agencies should expect from a digital forensics partner and how MSAB puts transparency, accountability and long-term commitment at the heart of its work....read more

Deep dive into ‘METADATA’

Deep dive into ‘METADATA’ Hancom is glad to release a new whitepaper of ‘Metadata’, and hope this can help you to improve your forensic investigation skills. This whitepaper focuses on the research of Metadata. We will use MD-RED and analyze

Distant Traces and Their Use in Crime Scene Investigation

Starting with a physical crime scene – a fire – Manon Fischer describes how IoT devices such as “smart” plugs and thermostats store “distant traces” remotely, and could be used to help reconstruct a fire’s origin, cause, and timeline. Session

The Wisdom of the Heap: Mesh It up by Weaving Data Structures

In this short presentation, Trufflepig Forensics’ Aaron Hartel and Christian Müller present some early stage research about the volatility of data in memory as data structures change version to version. Session Chair: We’re now going over to memory forensics and

Oxygen Forensics Introduces User-Focused Advancements In Latest Release

Oxygen Forensics has released the latest version of the all-in-one digital forensic solution, Oxygen Forensic® Detective v.14.6. This version adds support for multiple new backups, continues to improve the iOS Agent extractor, and introduces a new analytic feature. Brute-force for

Toward Graph-Based Network Traffic Analysis and Incident Investigation

At DFRWS-EU 2022, Milan Cermak describes the need to create data associations for use during network traffic analysis and incident investigation. The focus is on robust graph data visualization of the kind that’s commonly used in criminal investigation, allowing analysts

2022 2Q MD-Series Release Note Highlights

Find out the major features in MD-Series that are supported in 2Q 2022.  MD-NEXT v1.91.4–v1.91.9 Supports new 2,428 models, updated 783 Models. Android Full filesystem extraction method added Samsung Galaxy S22 Qualcomm Series. Supports iOS Checkm8 Full Filesystem (iOS 15.0∼15.2.1

Get Ready for the Next Big Reveal From Grayshift

Grayshift continues to extend its strength in lawful access and extraction capabilities As a leader in cell phone forensics, Grayshift, has been hard at work developing new features for law enforcement partners like you. We strive to provide law enforcement

MSAB – a Major Player in IDC report on Digital Forensics

MSAB, a global leader in digital forensic technology for mobile device examination and analysis, announced it has been named as a Major Player in the IDC MarketScape: Worldwide Digital Forensics in Public Safety 2022 Vendor Assessment. The report noted that

When Did It Happen? Dealing With Timestamps in Amped FIVE

By David Spreadborough – Forensic Video Analyst at Amped Software There are several common components within a CCTV Video file. This article from Amped Software is going to dive into the data that links the image to the time when