news

Today: IC3 puts BEC losses at $2.7 billion a year as Jeff Rutherford and Doug Metz detail forensic investigation steps; Belkasoft X v2.13 expands BelkaGPT and adds MFT-based deleted file recovery from volume shadow copies, and more.

Today: Hayabusa v4.4.0 scans VHDX and E01 disk images without mounting or admin rights; Forensic Media Extractor recovers and grades media from E01, VM and phone images via browser interface, and more.

Today: MemProcFS-Analyzer v1.3.0 adds CLI support and new FindEvil alerts for injected payloads; RabbitHole adds RealmDB, MMKV and Mozilla browser artifact support with SQLite improvements, and more.

Today: Windows ETL Files as a Forensic Evidence Source and WerFault.exe Internals Revealed via Reverse Engineering, and more.

Today: Page One’s Rob Fried And Andrew Milauskas On Using AI In Digital Forensics And E-Discovery and New Open-Source Tool Reads Windows Registry Hives Offline, and more.

Today: Forensics Forward runs online on November 10, 2026, covering SQLite recovery, vehicle forensics and cryptocurrency tracing; Semantics 21’s S21 CCTV uses offline AI to identify subjects across Ring, dash cam and CCTV footage, and more.

Today: Detego Global’s Unified Digital Forensics Platform uses AI to flag known abuse images and accelerate evidence processing; Cellebrite Genesis surfaces 16 unidentified victims in 15 minutes, augmenting investigators while preserving chain of custody, and more.

Today: Mark Morris used Belkasoft X to help convict Jason Cunningham of £113,000 property fraud; Azure forensics reference covers Entra ID logs, RBAC and service principal credential abuse, and more.

Today: Edge DFIR Toolkit covers 10 platforms, 92 artifacts and 142 detections with Sigma and YARA rules; ALEAPP gains a KeepSafe parser recovering EXIF metadata and GPS coordinates from Android vault files, and more.

Today: Cellebrite Genesis brings agentic AI to digital investigations, introduced by Matt Goeckel; Magnet Forensics unifies GrayKey, AXIOM and Griffeye under Magnet One to cut lab backlogs, and more.

Today: Cellebrite Autumn 2026 Release expands Genesis AI with drone forensics and CDR analysis; Citizen Lab, Amnesty and SHARE Foundation confirm Serbia used Pegasus and NoviSpy against 15 targets, and more.

Today: Eric Zimmerman’s forensic tools migrate from .NET 9 to .NET 10 LTS; Six LEAPP tools add SHA-256 hashing, LVM2, LUKS, RAID support and new artifacts, and more.

Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber for offline forensic analysis; Passware Kit 2026 v4 adds YellowKey BitLocker recovery, E01 export and eCryptfs support, and more.