#digital-forensics — Public Fediverse posts

See how the New Jersey State Police ICAC Unit used ADF Pro to cut on-scene mobile device triage from hours to as little as 30 minutes, reduce unnecessary seizures by 60–70%, and keep investigations moving when every minute counts. https://www.forensicfocus.com/case-studies/from-hours-to-minutes-how-new-jersey-state-police-transformed-digital-evidence-triage/ #ADFSolutions #ADFPro #DigitalForensics #DFIR

When researching online, OSINT browser extensions can help you collect, verify, and save information faster—without constantly switching tools.

Here are some useful browser extensions for OSINT and online investigations 😎👇

Find a high-res pdf ebook with all my cybersecurity related infographics from https://study-notes.org

#osint #digitalforensics #infosec #cybersecurity #informationsecurity

Join Cellebrite’s July 7 webinar to learn how responsible AI can help investigators connect evidence, uncover insights faster, and maintain the transparency and defensibility every case demands—register now. https://www.forensicfocus.com/news/upcoming-webinar-ai-is-the-hot-sauce-from-data-overload-to-investigative-insight/ #Cellebrite #AI #DigitalForensics #DFIR

Join Cellebrite’s July 7 webinar to learn how responsible AI can help investigators connect evidence, uncover insights faster, and maintain the transparency and defensibility every case demands—register now. https://www.forensicfocus.com/news/upcoming-webinar-ai-is-the-hot-sauce-from-data-overload-to-investigative-insight/ #Cellebrite #AI #DigitalForensics #DFIR

#reminder 📱 Cellebrite DI Ltd. is an Israeli digital forensics company behind UFED tools used by law enforcement and enterprises worldwide. Founded in 1999, it has expanded into broader digital intelligence—alongside recurring controversies over investigations and device access. 🌍⚖️ #DigitalForensics #Cybersecurity https://en.wikipedia.org/wiki/Cellebrite

#reminder 📱 Cellebrite DI Ltd. is an Israeli digital forensics company behind UFED tools used by law enforcement and enterprises worldwide. Founded in 1999, it has expanded into broader digital intelligence—alongside recurring controversies over investigations and device access. 🌍⚖️ #DigitalForensics #Cybersecurity https://en.wikipedia.org/wiki/Cellebrite

Discover what’s new on Forensic Focus – explore digital evidence investigations with David Shipley, deepfake image analysis with Amped Software, RAID forensics with Atola Technology, Cellebrite’s journey to Genesis, and more. https://www.forensicfocus.com/news/forensic-focus-digest-july-03-2026/ #DigitalForensics #DFIR

Linux investigations move fast, and knowing where to look matters. This cheat sheet highlights key digital forensic artifacts that incident responders, SOC analysts, and DFIR teams should collect when investigating a Linux system 😎👇

Find high-res pdf ebooks with all my Linux and cybersecurity related infographics from https://study-notes.org

#cybersecurity #linux #infosec #pentesting #digitalforensics

Passware Kit Mobile 2026 v4 expands Samsung S20 decryption coverage, speeds up password recovery with caching and batch optimizations, and adds support for more iOS, Huawei, and Android devices. https://www.forensicfocus.com/news/passware-kit-mobile-2026v4-decrypts-qualcomm-based-samsung-s20/ #Passware #DigitalForensics

[DECODED] Tacloban shooting and the lies that undermine protective measures

https://web.brid.gy/r/https://www.rappler.com/voices/newsletters/decoded-tacloban-school-shooting-lies-undermine-protective-measures/

[DECODED] Tacloban shooting and the lies that undermine protective measures

https://web.brid.gy/r/https://www.rappler.com/voices/newsletters/decoded-tacloban-school-shooting-lies-undermine-protective-measures/

New iLEAPP artifact by James Habben: Home Depot iOS App
Check out some of the artifacts we can get from a logical extraction:
🏠 Home Depot - Account
📍 Home Depot - Local Store
🔖 Home Depot - Saved Searches
🕘 Home Depot - Search History
👁️ Home Depot - Products Viewed
🛒 Home Depot - Shopping Lists
📌 Home Depot - Last Known Location
🖼️ Home Depot - Product Image Cache
🔗 Home Depot - Search URL Cache
⚙️ Home Depot - Other Preferences

Check out the blog post here:
👉 https://leapps.org/blog-post?post=home-depot-ios-artifacts

#DFIR #DigitalForensics

New iLEAPP artifact by James Habben: Home Depot iOS App
Check out some of the artifacts we can get from a logical extraction:
🏠 Home Depot - Account
📍 Home Depot - Local Store
🔖 Home Depot - Saved Searches
🕘 Home Depot - Search History
👁️ Home Depot - Products Viewed
🛒 Home Depot - Shopping Lists
📌 Home Depot - Last Known Location
🖼️ Home Depot - Product Image Cache
🔗 Home Depot - Search URL Cache
⚙️ Home Depot - Other Preferences

Check out the blog post here:
👉 https://leapps.org/blog-post?post=home-depot-ios-artifacts

#DFIR #DigitalForensics

Join Cellebrite’s July 7 webinar to learn how responsible AI can help investigators connect evidence, uncover insights faster, and maintain the transparency and defensibility every case demands—register now. https://www.forensicfocus.com/news/upcoming-webinar-ai-is-the-hot-sauce-from-data-overload-to-investigative-insight/ #Cellebrite #AI #DigitalForensics #DFIR

Join Cellebrite’s July 7 webinar to learn how responsible AI can help investigators connect evidence, uncover insights faster, and maintain the transparency and defensibility every case demands—register now. https://www.forensicfocus.com/news/upcoming-webinar-ai-is-the-hot-sauce-from-data-overload-to-investigative-insight/ #Cellebrite #AI #DigitalForensics #DFIR

Explore key highlights from Techno East 2026 and see what’s ahead as the community returns to Myrtle Beach in 2027. https://www.forensicfocus.com/event-info/techno-security-digital-forensics-conference-east-2026-return-to-myrtle-beach/ #TechnoSecurity #DigitalForensics

Explore a selection of the latest DFIR employment opportunities in this week’s Forensic Focus jobs round-up. https://www.forensicfocus.com/jobs/digital-forensics-jobs-round-up-june-29-2026/ #DigitalForensics #DFIR

Deepfake forensics goes far beyond pressing a detection button: Amped Software explores why suspected AI-generated or manipulated images require a structured, explainable, and defensible forensic workflow. https://www.forensicfocus.com/articles/deepfake-forensics-how-to-analyze-suspected-ai-generated-images/ #AmpedSoftware #Deepfakes #DigitalForensics #DFIR

Cellebrite Genesis uses agentic AI to help investigators analyse complex digital evidence, surface connections, and move from data to actionable intelligence faster. https://www.forensicfocus.com/videos/cellebrite-genesis-get-case-insights-in-minutes/ #Cellebrite #CellebriteGenesis #DigitalForensics #DFIR

Read the latest DFIR news - AI tools for digital investigations, SQLite forensic recovery, memory forensics workflows, vehicle location analysis, and more. https://www.forensicfocus.com/news/digital-forensics-round-up-june-24-2026/ #DigitalForensics #DFIR

Unlabelled RAID drives, no documentation, and a ticking evidence integrity clock: here’s how investigators can avoid the most common RAID forensics mistakes before they compromise a case. https://www.forensicfocus.com/articles/raid-forensics-handling-unknown-configurations-in-dfir-investigations/ #AtolaTechnology #DigitalForensics #DFIR

Cellebrite Genesis brings purpose-built agentic AI into the investigative workflow, helping agencies surface leads faster while keeping investigators in control. https://www.forensicfocus.com/articles/the-new-age-of-investigations-cellebrites-journey-to-genesis/ #Cellebrite #CellebriteGenesis #AI #DigitalForensics

Atola Technology’s Insight Forensic 5.8 update introduces selective logical imaging of files with detected artifacts, helping investigators extract key evidence into L01 format faster without waiting for a full drive image. https://www.forensicfocus.com/news/atola-insight-forensic-5-8-has-been-released-whats-new/ #AtolaTechnology #DigitalForensics

Digital evidence is reshaping public safety investigations - take Magnet Forensics’ Digital Investigations in Public Safety survey to share where workflows are slowing down, help shape future best practices, and get early access to the findings. https://www.forensicfocus.com/news/magnet-forensics-invites-you-to-take-part-in-the-digital-investigations-in-public-safety-survey/ #MagnetForensics #DigitalForensics

Discover what’s new on Forensic Focus – explore best practices for using AI in digital forensics, meet Jason Lesser of MAP and Track, hear from Leica’s Marcus Rowe on investigating the world’s largest crash test, and more. https://www.forensicfocus.com/news/forensic-focus-digest-june-19-2026/ #DigitalForensics #DFIR

Detego Global’s new webinar series shows investigators how to cut through growing digital evidence backlogs and turn data into actionable intelligence faster. https://www.forensicfocus.com/news/detego-global-announces-webinar-series-for-investigators-across-north-america-india-and-africa/ #DetegoGlobal #DigitalForensics

📈 Management loves big numbers. Big numbers feel like progress. But whatever we measure is what we incentivize. A lot of activity does not equal impact.

📉 A drive imaged is not a question answered. A phone extracted is not a case moved. And pretty soon we will realize that tokens spent are not insight gained.

🧮 We need to count what matters.

#DFIR #DigitalForensics

📈 Management loves big numbers. Big numbers feel like progress. But whatever we measure is what we incentivize. A lot of activity does not equal impact.

📉 A drive imaged is not a question answered. A phone extracted is not a case moved. And pretty soon we will realize that tokens spent are not insight gained.

🧮 We need to count what matters.

#DFIR #DigitalForensics

Cellebrite explores how AI is transforming digital forensics by accelerating analysis and connecting evidence, while human expertise and rigorous verification remain essential. https://www.forensicfocus.com/articles/ai-in-digital-forensics-10-best-practices-for-investigators/ #Cellebrite #AI #DigitalForensics #DFIR

Digital forensic tools help investigators collect, preserve, and analyze evidence from disks, memory, networks, timelines, and mobile devices to get a clearer picture of what happened during a cyber incident.

Here are a list of popular digital forensic tools 😎👇

Find high-res pdf books with all my cybersecurity related infographics from https://study-notes.org

#cybersecurity #infosec #informationsecurity #datasecurity #digitalforensics

See how BelkaGPT turns audio, voice messages and video into searchable text, helping investigators find the exact moment a keyword was spoken. https://www.forensicfocus.com/videos/forensic-audio-video-transcription-search-hours-of-recordings-in-seconds-belkagpt/ #Belkasoft #BelkaGPT #DigitalForensics #DFIR

Amped Software’s first free UK event lands in Stafford on 9 September, bringing professionals together for practical insights, expert-led sessions and open discussion on the future of image and video forensics—register now to secure your place. https://www.forensicfocus.com/news/amped-connect-uk-the-free-event-every-uk-amped-user-should-attend/ #AmpedSoftware #AmpedConnect #DigitalForensics #DFIR

Why we do this work…

There aren’t many rewards in a discipline that is about taking the long term view but occasionally something comes up that you can take some pride in.

Last month, Ed Summers put out a call on Mastodon: digipres.club where he was wrestling with a CD-R format that was difficult to recognize. The disks likely held precious data belonging to his late brother.

Much of the search area had already been examined and narrowed down by folks in the community, including Misty de Meo, Roxi Ruuska, Ethan Gates, and Johan van der Knijff who all contributed suggestions and analysis..

Ed was able to share a copy of one of his disk images, and I had some time that I could dedicate to taking a look as well.

Long-story short, we were able to identify the disks, and Ed has written up the background here: https://inkdroid.org/2026/06/12/tascam/

The situation might be familiar to others: a digital file that isn’t recognized by the major file format identification tools, and yet, because of its context, you know it is something that might be important.

I have different experiences with these types of files, sometimes they are valuable (and you want to look after them), sometimes they are not (and it can still benefit you to get rid of them). The process of finding this out often follows a similar path.

In this instance the files turned out to be incredibly valuable and I wanted to elaborate on the path of discovery. Even though it really isn’t very sophisticated, I hope it will be helpful to those with unidentified digital records who might find the task of identifying them quite daunting.

Why we do this work…

There aren’t many rewards in a discipline that is about taking the long term view but occasionally something comes up that you can take some pride in.

Last month, Ed Summers put out a call on Mastodon: digipres.club where he was wrestling with a CD-R format that was difficult to recognize. The disks likely held precious data belonging to his late brother.

Much of the search area had already been examined and narrowed down by folks in the community, including Misty de Meo, Roxi Ruuska, Ethan Gates, and Johan van der Knijff who all contributed suggestions and analysis..

Ed was able to share a copy of one of his disk images, and I had some time that I could dedicate to taking a look as well.

Long-story short, we were able to identify the disks, and Ed has written up the background here: https://inkdroid.org/2026/06/12/tascam/

The situation might be familiar to others: a digital file that isn’t recognized by the major file format identification tools, and yet, because of its context, you know it is something that might be important.

I have different experiences with these types of files, sometimes they are valuable (and you want to look after them), sometimes they are not (and it can still benefit you to get rid of them). The process of finding this out often follows a similar path.

In this instance the files turned out to be incredibly valuable and I wanted to elaborate on the path of discovery. Even though it really isn’t very sophisticated, I hope it will be helpful to those with unidentified digital records who might find the task of identifying them quite daunting.

Oops. A virus left its traces on some of the disks. But ... the virus was created only after the author's death! The virus thus becomes a stemmatological tool #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

Oops. A virus left its traces on some of the disks. But ... the virus was created only after the author's death! The virus thus becomes a stemmatological tool #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

Read the latest DFIR news – CCTV chain of custody, UEFI bootkit detection, Android intrusion log analysis, new LEAPP reporting, macOS Tahoe artifacts, and more. https://www.forensicfocus.com/news/digital-forensics-round-up-june-17-2026/ #DigitalForensics #DFIR

What do you do when you receive a collection of 115 floppy disks without any indication of order or content? Pick one (do not forget to make a forensic copy) and take a peek! #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

What do you do when you receive a collection of 115 floppy disks without any indication of order or content? Pick one (do not forget to make a forensic copy) and take a peek! #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

Digital philology thus allows to study not only what was written, but how something was written in digital environments (blackened text in the image is still unpublished) #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

The end of digital text is sometimes not the end of digital text. Some files - especially such created by Word - have invisible extensions. In this case, they contain text which was deleted before a file was saved. This can be quite interesting material! #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

Leetspeak Easter Egg: Microsoft encoded the file header as the hex sequence "D0CF11E", which reads "docfile". #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

Digitality starts with at least two distinct symbols, typically 0 and 1, but it could also be 🍎 and 🍐 - the computer does not care. The computer decodes groups of binaries into something that humans can understand. This interpretation process is arbitrary: it relies on knowledge about what is encoded. Was it intended to represent a number or a letter? #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

"Philology has always read the traces left on paper. What changes when those traces are no longer inscribed on te page, but embedded in a hard drive?"#retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

In the humanities, digital forensics, however yet untypical, are gaining ground. It allows, for example, retrace the creative process, much like classical text genesis, but in another medium. If a writer uses a computer, this process will be untraceable without a digital philology #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

The archive is changing because writing practices are changing, and this is an ongoing and very silent process. That is the moment for digital forensics. First, make a forensic copy - legally equivalent to the original - to save the data from obsolescence #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

The archive is changing! What was once a symbol for "save file" became not only a funny retro emoji, but an actual challenge for the archives. What to do with digital media we do not even know any more from own experience? #retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

[DECODED] Why AI is no match for human creativity

https://web.brid.gy/r/https://www.rappler.com/voices/newsletters/decoded-why-ai-no-match-human-creativity/

Today 4PM Lecture: "Digital Remains: An Introduction to Forensic Philology" by Mariangela Giglio (Bologna), part of the series "Hack & Play", online and on site at the @ZPD. Further information and livestream: https://
hacknplay2026.rtrlb.de
#retrocomputing #digitalforensics #digitalheritage #borndigital #digitalarchives #digitalhumanities #hacknplay2026

New applied #DigitalForensics research using #ALEAPP titled: Seeing the Evidence: A Forensic Framework for Analyzing Ray-Ban Meta AI Smart Glasses.

We have reached out to the researchers to see if and when the parser can be merged to #ALEAPP. Good stuff.

👉 Check it out the research here:
https://www.researchgate.net/publication/404038076_Seeing_the_Evidence_A_Forensic_Framework_for_Analyzing_Ray-Ban_Meta_AI_Smart_Glasses

New blog post on leapps.org: how to write an artifact module for iLEAPP (and ALEAPP, RLEAPP, and VLEAPP — same process, different repo).

A module is one Python file. The framework handles the rest. The guide covers structure, SQLite and plist parsing, timestamps, LAVA conversation view, and a full working example you can copy and adapt.

👉 https://leapps.org/blog-post?post=2026-06-14-how-to-write-an-ileapp-module

#DFIR #MobileForensics #iLEAPP #OpenSource #DigitalForensics

Exif Smuggling

https://github.com/signalblur/exifsmugglingpoc

#HackerNews #Exif #Smuggling #privacy #security #digitalforensics #technews