Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →

The Forensic Focus State Of DFIR Survey Is Now Open

Hero Image

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report...

Today's headlines 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

Forensic Focus Digest, 16 Oct 2026

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, and more....read more

Magnet Autokey: Accelerating Your Vehicle Investigations

Magnet Autokey: Accelerating Your Vehicle Investigations

Jason Miranda and Evan Walker from Magnet Forensics show how Magnet Autokey pulls location history, connected devices and even text messages from encrypted vehicle infotainment systems in under 30 minutes....read more

Semantics 21 Is Calling Time On Outdated Investigation Tools

Semantics 21 Is Calling Time On Outdated Investigation Tools

Digital evidence has evolved, and investigative tools must keep pace - discover how Semantics 21 helps investigators work faster, search smarter and maintain control without compromising professional judgement....read more

Distant Traces and Their Use in Crime Scene Investigation

Starting with a physical crime scene – a fire – Manon Fischer describes how IoT devices such as “smart” plugs and thermostats store “distant traces” remotely, and could be used to help reconstruct a fire’s origin, cause, and timeline. Session

The Wisdom of the Heap: Mesh It up by Weaving Data Structures

In this short presentation, Trufflepig Forensics’ Aaron Hartel and Christian Müller present some early stage research about the volatility of data in memory as data structures change version to version. Session Chair: We’re now going over to memory forensics and

Oxygen Forensics Introduces User-Focused Advancements In Latest Release

Oxygen Forensics has released the latest version of the all-in-one digital forensic solution, Oxygen Forensic® Detective v.14.6. This version adds support for multiple new backups, continues to improve the iOS Agent extractor, and introduces a new analytic feature. Brute-force for

Toward Graph-Based Network Traffic Analysis and Incident Investigation

At DFRWS-EU 2022, Milan Cermak describes the need to create data associations for use during network traffic analysis and incident investigation. The focus is on robust graph data visualization of the kind that’s commonly used in criminal investigation, allowing analysts

2022 2Q MD-Series Release Note Highlights

Find out the major features in MD-Series that are supported in 2Q 2022.  MD-NEXT v1.91.4–v1.91.9 Supports new 2,428 models, updated 783 Models. Android Full filesystem extraction method added Samsung Galaxy S22 Qualcomm Series. Supports iOS Checkm8 Full Filesystem (iOS 15.0∼15.2.1

Get Ready for the Next Big Reveal From Grayshift

Grayshift continues to extend its strength in lawful access and extraction capabilities As a leader in cell phone forensics, Grayshift, has been hard at work developing new features for law enforcement partners like you. We strive to provide law enforcement

MSAB – a Major Player in IDC report on Digital Forensics

MSAB, a global leader in digital forensic technology for mobile device examination and analysis, announced it has been named as a Major Player in the IDC MarketScape: Worldwide Digital Forensics in Public Safety 2022 Vendor Assessment. The report noted that

When Did It Happen? Dealing With Timestamps in Amped FIVE

By David Spreadborough – Forensic Video Analyst at Amped Software There are several common components within a CCTV Video file. This article from Amped Software is going to dive into the data that links the image to the time when