Articles

ADF Solutions · Aug 27, 2026

How a UK Police Unit Cut Device Submissions by 76% and Cleared CSAM Backlogs with Digital Triage

A UK regional police force's online investigation team reduced device submissions to its digital forensic unit by 76% in one year by adopting frontline digital triage with ADF Pro. Here is what changed and why it matters for investigators tackling CS

Kevin DeLong · Aug 22, 2026

Deleted Doesn’t Mean Gone: What 2026 Research Reveals About Mobile Anti-Forensics

Mobile anti-forensics can make evidence harder to see without fully removing it. A major 2026 review identifies where residual traces persist—and how examiners can build a more complete, defensible analysis.

ADF Solutions · Aug 19, 2026

New Jersey State Police Cuts On-Scene Time and Device Seizures with Digital Forensic Triage

See how the New Jersey State Police ICAC Unit used digital forensic triage with ADF Pro to reduce on-scene time, limit unnecessary mobile device seizures, and focus resources on the evidence that matters most.

ADF Solutions · Aug 6, 2026

How the UK Metropolitan Police Triaged 6,000 Devices and Transformed Frontline Digital Forensics

When a single search warrant can produce more than 100 devices, traditional forensic workflows simply cannot keep up. Learn how the UK Metropolitan Police Service triaged over 6,000 devices in two years, achieved a 50% escalation rate, and transforme

Kevin DeLong · May 5, 2026

The Machine Found It. Should You Trust It?

AI can help digital investigators move faster through overwhelming evidence volumes.

ADF Solutions · Feb 10, 2026

How to Triage from a USB Device: Boot and Live Scan Computers

ADF Solutions · Jan 28, 2026

How to Master Triage For Your Forensic Investigations

ADF Solutions · Jan 23, 2026

What’s New? ADF PRO v6.2.0 Features and Enhancements

ADF Solutions · Jan 20, 2026

ADF Launches Refreshed Brand Identity to Celebrate 20 Years of Innovation

ADF Solutions · Jan 16, 2026

Why Digital Forensic Triage Matters: A Cost-Benefit Analysis from the Field

Independent data underscores the sheer scale and evolving nature of online child sexual abuse, and it’s precisely why agencies are embracing triage-first workflows

MediaClone · Sep 30, 2025

The Field Investigator's Challenge: Why Traditional Digital Forensics Equipment Falls Short

Digital forensic investigators face a complex web of challenges when conducting field investigations. Understanding these problems—and their solutions—can mean the difference between a successful evidence collection and a compromised case.

MediaClone · Jul 25, 2025

MediaClone IT Cloning and Duplication – Essential Tools for Managing Forensic Servers

Maintaining and upgrading forensic servers is a critical yet complex task. These servers are responsible for handling massive volumes of digital evidence, and any disruption in performance or data integrity can significantly hinder investigative operations.

MSAB and Child Rescue Coalition to Combat Online Child Sexual Abuse

We are supporting Operation Artemis because it reflects the principles that guide our work, developing technology that enables law enforcement to act effectively, uphold integrity, and achieve meaningful results,” says Peter Gille, CEO of MSAB.

MSAB · Jul 23, 2025

MediaClone · Jun 19, 2025

How to Overcome the Backlog of Evidence Media in Your Digital Forensic Lab

The backlog for processing evidence media in digital forensic labs is a persistent challenge. Discover how to overcome these challenges and what to look for in a high volume forensic imaging solution.

Amped Software · Jun 17, 2025

Forensic Shoe Print Documentation and Analysis with Amped FIVE

Shoeprints are among the most revealing forensic evidence. They may not stand in the spotlight like fingerprints or DNA, yet they’re just as crucial, and often among the first evidence collected.

Now Available: XRY 11.2, XAMN 8.2, UNIFY 25.5, XEC 7.14, and KTE 11.2

MSAB is proud to announce the latest releases of XRY, XAMN, UNIFY, XEC, and KTE — all purpose-built to enhance efficiency and capability in mobile forensic extractions and analysis.

MSAB · Jun 16, 2025

Magnet Forensics · May 28, 2025

Reducing Enterprise Costs with SaaS-based Digital Forensics Solutions

Data breaches, malware infections, ransomware, unauthorized access to critical systems, and similar incidents against organizations have surged dramatically in recent years. Discover how SaaS-based digital forensics solutions are changing the DFIR landscape.

Amped Software · May 27, 2025

Advance Your Expertise: Specialized Training with Amped FIVE

The Amped FIVE Training Modules are designed to tailor your learning based on your specific investigative and casework needs. These specialized modules build on Amped’s core training and give you the opportunity to go further with training that fits your focus.

Amped Software · May 20, 2025

Forensic Fingerprint Analysis: Advanced Techniques with Amped FIVE

Discover how forensic fingerprint analysis reaches new levels of clarity and precision with Amped FIVE. This article explores advanced techniques for enhancing, preserving, and presenting fingerprint evidence, even in complex cases involving difficult surfaces or lighting conditions.

Introducing XRY 11.0.1 from MSAB

MSAB is proud to unveil XRY 11.0.1, the latest evolution in mobile forensics technology. This release brings powerful new capabilities and critical updates that strengthen investigators' ability to extract, decode, and analyze data from the most in-demand mobile devices and apps.

MSAB · May 16, 2025

MediaClone · May 15, 2025

Erase Data from NVMe SSD

In digital forensics and data security, securely non-retrieval erasing data from digital storage devices is paramount. Learn how to overcome common challenges of erasing data from NVMe SSD in forensic and data security applications.

Native File Format: A Must for Social Media Evidence

In legal investigations, screenshots of social media content might seem like a quick solution—but they often fall short. Discover why preserving online evidence in native file format is essential in social media and open-source intelligence.

SMI Aware · May 1, 2025

MediaClone · Apr 17, 2025

Portable, Rugged Digital Forensic Lab

When a forensic investigator needs to perform a full, on-site investigation, they need to consider a few preparations and constraints. Here are the most important things to look for in a portable forensic imager.

Supercharge Your Techno Security Experience with MSAB’s Exclusive Pre-Conference Training

As excitement builds for the Techno Security & Digital Forensics Conference East this June in Wilmington, NC, MSAB is proud to offer a one-of-a-kind opportunity for digital forensics professionals looking to sharpen their skills and gain an edge.

MSAB · Apr 9, 2025

New MSAB Release: XRY 11.0, XAMN 8.1, and XEC 7.13

MSAB is excited to introduce the latest releases of XRY, XAMN, UNIFY*, XEC and KTE that will help improve the efficiency when dealing with mobile device extractions and analysis.

MSAB · Mar 21, 2025

How to Get Social Media Evidence Admitted Into Court

Admitting social media and deep web findings into evidence is not difficult, but it does require ethical considerations and prompt action. Here's what you need to ensure you have to get social media evidence admitted into court.

SMI Aware · Feb 28, 2025

Amped Software · Feb 27, 2025

Amped Connect US 2025: Join Us in Wilmington

Mark your calendars for June 2, 2025, as Amped Connect US 2025 takes center stage at the Wilmington Convention Center in Wilmington, North Carolina, USA.

Tick-Tock: The Clock is ticking on TikTok Ban

TikTok's potential U.S. ban could go into effect by January 19, 2025. ByteDance must divest or face app removal, but what does that mean for the content collection & preservation of TikTok data in your investigations?

SMI Aware · Jan 17, 2025

MSAB is excited to introduce the latest releases of XRY, XAMN, XEC and KTE

MSAB is excited to introduce the latest releases of XRY, XAMN, XEC and KTE that will take you to the next level in mobile data extraction and analysis.

MSAB · Dec 16, 2024

Next level in mobile data extraction and decoding - XRY 10.11.1 from MSAB

Next level in mobile data extraction and decoding - XRY 10.11.1. Read what's new in XRY & XRY Pro in this latest release from MSAB.

MSAB · Nov 4, 2024

MSAB Major Release: XRY 10.11, XAMN 7.11, and XEC 7.11 Now Available

From simplified support for Android Full File System (FFS) to improved Project VIC keyboard grading shortcuts in XAMN and significant functionality updates brought to XEC, we’re featuring a host of upgrades and innovative additions that will further amplify the efficiency of our entire product suite.

MSAB · Oct 4, 2024

Next level in mobile data extraction and decoding – XRY 10.10.1

The latest versions of XRY and XRY Pro are here and available for download. The most recent release introduces key enhancements and heightened capabilities of our flagship tool, positioning law enforcement agencies for greater success in their digital investigations.

MSAB · Aug 24, 2024

Detego Global Launches Second Justice Accelerator Grant to Empower ICAC Investigators Across the U.S.

Detego Global, a pioneer in digital forensics and incident response solutions, has launched its Justice Accelerator Grant for the second year in a row. This year’s initiative focuses on empowering Internet Crimes Against Children (ICAC) investigators across the United States, reinforcing their crucial mission to prevent child abuse and bring perpetrators to justice.

Aug 22, 2024

Detego Global Announces Transformative Full-Day Training Session at The HTCIA Conference in Las Vegas

Detego Global has announced a complimentary full-day training session designed to revolutionize on-scene and lab-based investigations. This exclusive event, titled “Transforming DFIR Workflows with Detego Global’s Groundbreaking Solutions” will take place on July 23 at Planet Hollywood in Las Vegas from 8:00 AM to 5:00 PM. The event underscores Detego Global’s unwavering commitment to the Digital Forensics and Incident Response community and their steadfast support for the High Technology Crime Investigation Association (HTCIA).

Detego · Jul 28, 2024

S21 Global Alliance Database – the world’s biggest CSAM intelligence database with 2.5 BILLION records!

Law enforcement agencies struggle to keep up with the deluge of child sexual abuse material (CSAM). Categorisation and reporting processes are mostly manual and inconsistent across the globe. All too frequently, one image or video is investigated by multiple forces; each not realising that another force is working, or has worked, on identifying the same child. This wastes precious resources which could be redirected to rescuing other victims. Enter the S21 Global Alliance Database (S21 GAD).

Jul 2, 2024

Now available: XRY 10.10, XAMN 7.10, and XEC 7.10 from MSAB

MSAB is excited to introduce the latest releases of XRY, XAMN, and XEC. From broader support for Android Full File System to improved keyboard shortcuts in XAMN and significant reporting updates brought to XEC, we’re featuring a host of upgrades and innovative additions that will further amplify the efficiency of our entire product suite.

MSAB · Jun 28, 2024

Dr. Liam Owens · Jun 26, 2024

Embracing AI for a Safer Future: Revolutionising Law Enforcement with Advanced Technology

Dr. Liam Owens, Founder and CEO of Stafford-England-based Semantics 21, explores how artificial intelligence is changing the face of law enforcement.

Semantics 21 · Jun 24, 2024

Case Study: Utilising S21 LASERi-X in Identifying a Suspect of Terrorism

The need for advanced technology to swiftly identify terrorism suspects is paramount. S21 LASERi-X, an innovative tool from Semantics 21, has emerged as critical for investigators. This case study delves into a scenario where the S21 LASERi-X played a pivotal role in identifying a suspect involved in terrorist activities.

Semantics 21 · Jun 20, 2024

Semantics 21: Advancing AI for Victim Identification

Semantics 21 (S21) is at the forefront of leveraging machine learning and artificial intelligence to process and analyse vast amounts of digital data. Their advanced software plays a pivotal role in identifying victims in heinous crimes such as child exploitation, human trafficking, and terrorism. By rapidly detecting potential victims in images and videos, S21’s technology provides critical leads for investigators, enhancing the accuracy and efficiency of investigations. This innovation minimizes harmful exposure to investigators, reduces their workload, and helps address the backlog of cases awaiting investigation.

Introducing XRY 10.9, XAMN 7.9, and XEC 7.9 from MSAB

MSAB, a leader in mobile forensics, is proud to announce its latest release, packed with powerful new features and significant updates designed to enhance digital investigations for law enforcement and government agencies worldwide. The new versions of XRY, XAMN, and XEC from MSAB will elevate your mobile data extraction capabilities, simplify digital evidence analysis, and enhance your reporting efficiency.

MSAB · Apr 11, 2024

Navigating SEC Regulations In Cybersecurity And Incident Response

As 2024 approaches, we all know how vital it is to keep up to date with regulatory changes that affect our work. We get it – it’s a lot to juggle, especially when you’re in the trenches working on an investigation, handling, and responding to incidents.

Binalyze · Dec 21, 2023

Pagefreezer Announces Strategic Acquisition of the X1 Social Discovery Solution to Expand Online Evidence Collection Offering

Pagefreezer, a leader in archiving and compliance solutions as well as the provider of WebPreserver, an online evidence-collection solution for websites and social media for law firms and investigative teams, announced the strategic acquisition of the X1 Social Discovery product from X1 Discovery Inc. This acquisition aims to redefine the landscape of online evidence collection solutions.

Dec 20, 2023

Adam Firman · Dec 18, 2023

BFU – Seeing is Believing

This is the common reaction; a device needs extracting, and you find it in a BFU state. According to other vendors, your options are now limited. Even if you do get an extraction, it will only acquire basic information. BFU means the data is encrypted and secured.

Adam Firman · Oct 30, 2023

MediaTek: A Short Story

Access to MediaTek’s Boot ROM interface is the best way to extract the maximum amount of data from any device with a MediaTek chipset. The Boot ROM is always there, and it will not change. Because of this, we do not have to worry about different vendors, firmware, or security patches. It just works.

Detego Global Introduces Breakthrough AI for Faster Face Recognition and Search

Detego Global has introduced cutting-edge AI-powered face recognition and semantic search capabilities to Detego Analyse AI+, the company’s acclaimed investigative analytics platform. These innovative features enable investigators to rapidly build face recognition watchlists, identify persons of interest twice as fast as the industry average, and refine searches to pinpoint persons in specific locations, performing particular actions, holding objects of interest or displaying certain emotions.

Detego · Oct 27, 2023

Cell Site Analysis: Capturing a Snapshot of the Cellular Network’s Coverage

When crime scene or accident investigators examine a location, they take all the necessary measures to accurately collect, record and document the environment and characteristics, so as to have the best chance of accurately determining what happened, or to build on clues in pursuit of the truth.

Bill Teel · Apr 4, 2023

Greg Kipper · Mar 23, 2023

Future-Proof Your Cyber Career

Cyber moves fast, so staying on top of everything can be difficult to impossible at times. So, to effectively future-proof your cyber career, you can do some or all of the following things. Doing so will ensure you stay ahead of the curve without wasting time looking in the wrong direction.

Matt Danner · Mar 1, 2023

3 Ways Programming Skills Can Help You Succeed in DFIR

I often come across this topic among those interested in digital forensics and incident response (DFIR). People seem to ask the same question – “Do I need to learn how to code?” – as if it’s a dreaded task. While you don’t have to be an expert coder in order to have a successful career in DFIR, having some programming knowledge can help you excel.

Elevated Speed Performance with the Samsung 990 Pro

Non-Volatile Memory (NVMe) storage, which Wikipedia defines as a type of computer memory that can retain stored information even after power is removed, was developed in 2009. In comparison, volatile memory requires constant power to keep data. NVMe SSDs offer the advantage of running quickly through the PCIe Bus on the Motherboard.

Bitmindz · Feb 7, 2023

Jeff Phillips · Dec 12, 2022

Tips, Tools and Techniques for Using Open Sources in Threat Intelligence

Open-source intelligence doesn’t just refer to the accessibility of information. OSINT is the practice of collecting information from publicly available sources that is widely used by analysts in nearly every type of organization — from government and law enforcement to financial crime analysts, fraud and brand misuse investigations, and particularly cybersecurity.

Keven Hendricks · Dec 11, 2022

The Rise of LokiNet

Over the past few years, we’ve witnessed the advent of cryptocurrency and blockchain technology become the technological paragon and consequently, an investment zeitgeist. While you will find many polarizing views on cryptocurrency, you will find few (if any) naysayers or neophobic attitudes towards blockchain technology.

Jeff Phillips · Dec 8, 2022

How Managed Attribution Empowers Online Researchers

Chances are, anyone involved in online research – cybersecurity specialists, fraud and brand misuse analysts, law enforcement investigators – has heard of the concept of managing attribution in order to stay safe and anonymous online.

Jeff Phillips · Nov 9, 2022

Why and How You Should Include the Dark Web in Your Research

The dark web is an area of the internet that’s not accessible using regular commercial browsers. It is most notoriously known for the illegal activity it facilitates. However, for online investigators, the dark web can be a tremendous resource for gathering information, researching their adversaries and following up on threat indicators.

Jeff Phillips · Nov 2, 2022

Top Online Tools for Law Enforcement Investigations

Federal and local law enforcement agencies have dedicated divisions for fighting cybercrime, and naturally, most of their time is spent browsing the internet — gathering intelligence on cyber terrorists, investigating computer-based crimes, and following up on reports of fraud, hacks and stolen data.

Matt Danner · Sep 14, 2022

How Ankura Eliminates Reliance on Disparate Data Sources When Managing eDiscovery Cases

See how a large global consulting firm streamlined their evidence management and storage tracking by switching from Excel spreadsheets to Monolith’s case management platform.

Keven Hendricks · Aug 20, 2022

Web3 – The Old Colossus?

Why do I say that the advent of “Web3” is the Old Colossus? Simply because, nobody knows for certain what “Web3” is going to truly be at this juncture. You will not find somebody alive today who has seen the Colossus of Rhodes, and you will certainly not find somebody today who can tell you how (and when) “Web3” will become commonplace for the world wide web as we know it.

Police Investigations Move to the Cloud

Justin Tolman and Lynne Roossien invited John Price of the West Midlands Police to join them on an episode of FTK Over the Air, Exterro’s podcast. Police Investigations move to the Cloud is the 12th episode of Exterro’s FTK podcast which was started earlier this year.

Exterro · Aug 17, 2022

ArcPoint Forensics · Jun 21, 2022

How to Use ExifTool to Look at Metadata

Today, we’ll discuss a very well known tool written by Phil Harvey. ExifTool is an extensively used tool to look at metadata from various types of files. It supports reading metadata from common file formats such as GPS, image files from many different digital cameras, video files, Microsoft Office files and many more. It’s freely available and can be downloaded from www.exiftool.org.