#dfir — Public Fediverse posts

Discover what’s new on Forensic Focus – explore UK police well-being funding, BitLocker decryption, protecting investigators working on child safeguarding cases, and more. https://www.forensicfocus.com/news/forensic-focus-digest-august-21-2026/ #DigitalForensics #DFIR

Oh yeah, cause business is on LinkedIn...

Ok, let's try: does anyone on the Fedi need (non AI slob) IT security consulting specialized on IT forensics for court, SOC/CERT, DFIR, and cyber crisis management exercises?

(Let's see if I can delete my LinkedIn...)

#fedihelp #askfedi #cybersecurity #infosec #dfir #linkedinalternative #getfedihired #freelance #freelancer #SOC #expertwitness #CERT #cybercrisismanagement #NoAI #noBot

Cellebrite Genesis is expanding globally and is now generally available to enterprises, helping teams surface critical connections in minutes rather than weeks. https://www.forensicfocus.com/news/cellebrite-genesis-for-enterprise-now-generally-available-regional-availability-expands-to-more-global-markets/ #Cellebrite #CellebriteGenesis #DigitalForensics #DFIR

Read the latest DFIR news - UK police investigator well-being, cloud search warrant strategy, Timestamped for macOS, iLEAPP and ALEAPP updates, and more. https://www.forensicfocus.com/news/digital-forensics-round-up-august-19-2026/ #DigitalForensics #DFIR

What Windows 11 Remembers (And Most Investigators Miss)
Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore.
Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases.
#DFIR #Windows11

Join Rich Frawley of ADF Solutions as he shares practical strategies for managing complex ICAC scenes, prioritizing the devices most likely to contain probative evidence, and making faster, more informed decisions in the field. https://www.forensicfocus.com/news/upcoming-webinar-reducing-icac-backlogs-prioritizing-digital-evidence-for-faster-investigations/ #ADFSolutions #ICAC #DigitalForensics #DFIR

iLEAPP and ALEAPP are both at v2026.3.1.

Landed on both sides in the same release: Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp, GroupMe, Chrome saved payments.

📱 iLEAPP also: OneDrive, Google Drive DriveKit, Onion Browser, Proton Mail conversation view with inline media

🤖 ALEAPP also: Instagram, Netflix, Amazon Shopping, Snapchat chat media, Wire recovery across encrypted app generations, LINE calls even with empty contact tables

Absence is not a negative finding. The tools should say so.

https://leapps.org/releases

#DFIR #DigitalForensics #OpenSource

Investigation Scenario 🔎

While investigating potential intellectual property theft, you discover the pictured registry artifact on a Windows 11 system.

The user claims they only connected a USB-C docking station.

What do you look for to investigate whether an incident occurred? Extra credit for focusing on the distinct order of operations you would take.

#InvestigationPath #DFIR #SOC

Paul Gullon-Scott examines whether £2.4m for police well-being is enough to turn good national initiatives into meaningful support on the ground. https://www.forensicfocus.com/articles/2-4-million-for-uk-police-well-being-what-will-it-actually-buy/ #DigitalForensics #DFIR

bulk_extractor 2.2.0 is released.
Highlights: CVE-2026-24857 fix; standalone 64-bit Windows executable; Windows raw-device input; runtime scanner plug-ins; improved Wi-Fi PCAP preservation; and broad reliability and parser hardening.
Source, Windows, and tested Snap assets are available here:
https://github.com/simsong/bulk_extractor/releases/tag/v2.2.0
#DFIR #DigitalForensics #OpenSource #Cybersecurity

New CPD-accredited training from our Well-Being Lead, Paul Gullon-Scott, is now available to help digital forensic investigators and their organisations better understand and manage the psychological demands of the role — book your place today. https://www.forensicfocus.com/news/new-dfir-mental-health-training-webinar-cpd-accredited/ #DigitalForensics #DFIR

Путеводитель по сертификациям DFIR-специалиста

Привет, Хабр! Меня зовут Артем Семагин, я ведущий аналитик киберкриминалистики в «Инфосистемы Джет». Пожалуй, один из самых популярных вопросов, который задают начинающие специалисты по цифровой криминалистике (да и не только начинающие), звучит примерно так: Какой сертификат сейчас ценится, что стоит сдавать? Если немного погрузиться в тему, то оказывается, что выбор совсем неочевиден. На рынке есть престижные сертификации (и очень дорогие) GIAC — GCFE, GCFA, а теперь ещё GX-FA и GLIR. Есть давно известный CHFI от EC-Council, множество вендорских сертификатов, таких как EnCE, ACE, MCFE, Belkasoft и от других разработчиков софта. В этой статье я решил сделать субъективный обзор наиболее известных DFIR-сертификаций: рассказать о тех, с которыми сталкивался сам, поделиться личным опытом и мнением коллег, а также обсудить, какие сертификаты стоят потраченных времени и денег, а какие можно спокойно пропустить.

https://habr.com/ru/companies/jetinfosystems/articles/1071190/

#dfir #soc #cybersecurity #информационная_безопасность #иб #сертификация #сертификаты

Release day. All five LEAPPs are at v2026.3.0 and LAVA is at v0.15.0.

📱 iLEAPP: Apple Unified Logs bundled into every build, PowerLog with time-offset correction, Telegram, Wickr, Session 🤖 ALEAPP: Signal for Android with full SQLCipher decryption, attachments and all 🖥️ DLEAPP: Roblox, Telegram Desktop (tdata), Windows Photos and Clock 📨 RLEAPP: Fritz!Box Supportdata 🌋 LAVA: conversation analytics view

And the housekeeping that matters: databases open read-only so we never write to evidence, no network calls at parse time, report injection fixes, and unsourced claims removed from the docs with CI guarding them out.

https://leapps.org/releases

#DFIR #DigitalForensics #OpenSource

Join Rich Frawley of ADF Solutions as he shares practical strategies for managing complex ICAC scenes, prioritizing the devices most likely to contain probative evidence, and making faster, more informed decisions in the field. https://www.forensicfocus.com/news/upcoming-webinar-reducing-icac-backlogs-prioritizing-digital-evidence-for-faster-investigations/ #ADFSolutions #ICAC #DigitalForensics #DFIR

Turn partial school badges into actionable leads with S21 School Badge Lookup v2.0, fast offline image intelligence built for CSAM and ICAC investigations worldwide. https://www.forensicfocus.com/news/unmasked-early-intelligence-should-not-be-manual/ #DigitalForensics #DFIR #Semantics21 #CSAM #ICAC

Read the latest DFIR news - NIST’s new ArtCat digital forensics catalog, Kohberger case methodology, Android intrusion log analysis, offline AI with BelkaGPT, and more. https://www.forensicfocus.com/news/digital-forensics-round-up-august-12-2026/ #DigitalForensics #DFIR

Investigation Scenario 🔎

You received an alert that one of your honeydocs was opened on a network other than your own.

What do you look for to investigate whether an attacker exfiltrated this file from your network?

#InvestigationPath #DFIR #SOC