Forensic Focus

The Forensic Focus State of DFIR Survey is now open. Caseloads, AI, tools, hiring and the year ahead, in 8 minutes. It's anonymous, and everyone who takes part can get early access to the report. Closes 30 November. www.surveymonkey.com/r/S3G2BCF #DFIR

Cellebrite’s Autumn 2026 Release introduces enhanced agentic AI-powered investigations with Genesis, expanded device access and new capabilities to help teams uncover critical evidence faster. #digitalforensics

Discover how Magnet Forensics’ integrated platform, from Graykey and Axiom to Automate, Review and Verify, helps agencies cut backlogs, collaborate in real time and build defensible cases from first access to final verdict. #digitalforensics

Today: Cellebrite Autumn 2026 Release expands Genesis AI with drone forensics and CDR analysis; Citizen Lab, Amnesty and SHARE Foundation confirm Serbia used Pegasus and NoviSpy against 15 targets, and more. #digitalforensics

Can AI outperform human examiners in digital forensics? Magnet Forensics launches its AI Research Lab with a peer-reviewed study revealing compelling findings on the accuracy and reliability of AI-driven media authentication. #digitalforensics

Today: Eric Zimmerman’s forensic tools migrate from .NET 9 to .NET 10 LTS; Six LEAPP tools add SHA-256 hashing, LVM2, LUKS, RAID support and new artifacts, and more. #digitalforensics

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools. #digitalforensics

What sets purpose-built investigative AI apart from general-purpose LLMs? Discover how Cellebrite Genesis helps investigators analyze digital evidence with traceable findings, warrant-bound search, and secure data handling. #digitalforensics

Discover what’s new on Forensic Focus: explore WMI permanent event subscription persistence with Vitalii, see how MD-RED v4 handles AI-powered mobile forensic analysis, hear how user feedback shapes new features in Amped FIVE, and more. #digitalforensics

Seven keynote speakers. One day. All online. We're excited to partner on Forensics Forward, bringing together experts in digital forensics, cybersecurity & law! 📅 November 10, 2026 | 9 AM–5 PM ET 🔗 Register now: commerce.cashnet.com/WECHT2

Join Detego Global in São Paulo on 26 November 2026 for an exclusive event showcasing cutting-edge digital forensics, AI-powered evidence analysis, and investigation management solutions designed to help investigators uncover critical evidence faster. #digitalforensics

Sam Abbot, Emi Polito and Andrea Frisina go behind the scenes to show how your feedback becomes new features in Amped FIVE, Replay, Authenticate and DVRConv, and why forensic soundness always comes first. #digitalforensics

Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber for offline forensic analysis; Passware Kit 2026 v4 adds YellowKey BitLocker recovery, E01 export and eCryptfs support, and more. #digitalforensics

See how MD-RED v4 handles growing evidence volumes with AI-based media analysis, malware scanning, CDR correlation and PC messenger data in one workflow. #digitalforensics

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support. #digitalforensics

Today: Europol and European Commission identify cloud, IoT and vehicle forensics gaps across EU member states; Framework guides examiners and attorneys on evidence authentication, attribution and courtroom testimony, and more. #digitalforensics

Today: Vitalii Kukhol details WMI permanent subscription detection using Sysmon, Volatility 3 and scrcons.exe artifacts; Atola Technology releases TaskForce firmware 2026.10 with a Compare module and Seagate fraud detection, and more. #digitalforensics

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup. #digitalforensics

Today: Europol and the European Commission identify cloud, IoT and vehicle forensics gaps across EU Member States; Georgia Tech researchers build ORISA to recover deleted AI assistant chats from Android memory, and more. #digitalforensics

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows. #digitalforensics

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report #digitalforensics

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehicle data to reveal driver behavior, #digitalforensics

Digital evidence has evolved, and investigative tools must keep pace – discover how Semantics 21 helps investigators work faster, search smarter and maintain control without compromising professional judgement. #digitalforensics

Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber to replace legacy tools; eBPF rootkits LinkPro and VoidLink suppress EDR visibility at kernel level, and more. #digitalforensics

Jason Miranda and Evan Walker from Magnet Forensics show how Magnet Autokey pulls location history, connected devices and even text messages from encrypted vehicle infotainment systems in under 30 minutes. #digitalforensics

Today: Guocai Wang shows how blur type, not blur alone, drives licence plate enhancement decisions; iVe analysis of a 2026 Hyundai Kona distinguished deliberate from accidental driving in a UK murder case, and more. #digitalforensics

Guocai Wang explores why “blurred” is not a diagnosis in forensic licence-plate analysis, and why the processing strategy should follow the material while the strength of interpretation follows the evidence. #digitalforensics

Can vehicle data reveal the difference between normal and reckless driving? Discover how iVe uses velocity logs, hard braking, and acceleration events to uncover critical changes in driver behavior and provide valuable evidence in investigations. #digitalforensics

See how MD-LIVE takes investigators from first connection to a court-ready report at the scene, with Block Hash Scan, Auto Scroll Capture and Chat Scanner in one on-site workflow. #digitalforensics

Today: VLEAPP grows from 103 to 202 artifacts, adding Ford SYNC, GM OnStar and BMW MGU support; VESTIGEX releases as a new free Windows desktop platform for DFIR, and more. #digitalforensics

Discover how the City of Johannesburg is using Detego’s digital forensics technology to accelerate evidence discovery, examine more devices, and streamline investigations without returning to the lab. #digitalforensics

S21 Transcriber turns audio and video evidence into searchable, reviewable intelligence, fully offline, so investigators can find what matters faster. #digitalforensics

Join F3 on 29 October at the FCA in London for a FREE, hands-on cryptocurrency investigation workshop exploring digital forensics, blockchain intelligence, OSINT and real-world investigative techniques. #digitalforensics

Today: F3 hosts a free cryptocurrency investigation day at the FCA’s Stratford Cross venue on 29 October 2026; Amped User Days returns as a free online event on February 23-25, 2027 for its 7th edition, and more. #digitalforensics

Discover what’s new on Forensic Focus: explore Belkasoft X for mobile forensics on iOS and Android, find out how MSAB’s XRY Pro and BruteStorm Surge helped expose an international fraud network, see how MD-LIVE’s Block Hash Scan identifies known target #digitalforensics

Explore Belkasoft X as a mobile forensics tool for iOS and Android acquisitions, full-file-system extraction, data recovery, application analysis, and reporting. #digitalforensics

Discover how MSAB’s XRY Pro and BruteStorm Surge helped unlock crucial digital evidence, expose an international fraud operation and bring long-awaited answers to a grieving family. #digitalforensics

Today: S21 Transcriber converts recordings to searchable text offline; Scalpel3 reconstructs fragmented files from wiped devices, and more. #digitalforensics

Amped User Days returns February 23–25, 2027, for three online half days of expert insights, practical workflows, AI discussions, and real-world forensic video challenges. #digitalforensics

Today: LSU releases Scalpel3, an open-source parallel tool that reconstructs fragmented files across 619 types; DFRWS updates the open-source SOLVE-IT knowledge base, and more. #digitalforensics

Today: Belkasoft X covers iOS and Android acquisition from iTunes backups to chipset-level imaging; SANS publishes Dynamic Incident Response: A Framework for Security Teams, and more. #digitalforensics

Explore Belkasoft X as a mobile forensics tool for iOS and Android acquisitions, full-file-system extraction, data recovery, application analysis, and reporting. #digitalforensics

Today: Block Hash Scan cuts triage time by hashing only blocks needed to match large files; MISP 2.5.47 patches 27 confirmed vulnerabilities, and more. #digitalforensics

Discover what’s new on Forensic Focus – explore the biggest challenges in mobile forensics with Magnet Forensics, discover faster investigative workflows with Cellebrite Genesis, meet Radim Motycka, founder of Proofsnap, and more. #digitalforensics

See how MD-LIVE’s Block Hash Scan helps investigators identify known target files on-site without reading every file in full, and what a zero-detection result really means. #digitalforensics

Today: Passware Kit Mobile 2026 v5 decrypts 24 Samsung Galaxy Watch models via Exynos SoC vulnerability; MSAB urges agencies to apply transparency criteria when selecting a digital forensics partner, and more. #digitalforensics

Passware Kit Mobile 2026 v5 expands mobile forensics with Samsung Galaxy Watch 4/5/6 passcode recovery and data extraction, new Samsung and Unisoc device support, Enpass for Android decryption, and faster workflows with immediate passcode recovery. #digitalforensics

Turn CCTV footage into usable evidence faster with S21 CCTV, an intuitive offline solution that helps investigators review, analyse, enhance, redact and report on time-critical video evidence without unnecessary complexity. #digitalforensics

Today: S21 CCTV gives investigators offline video review, enhancement, redaction and reporting in one tool; Berla Corporation releases iVe Generation 5, adding 38,500 vehicles and 388 infotainment systems, and more. #digitalforensics

Discover what agencies should expect from a digital forensics partner and how MSAB puts transparency, accountability and long-term commitment at the heart of its work. #digitalforensics