Forensic Focus

David Shipley joins the Forensic Focus Podcast to talk about the human cost of online safeguarding work and his fight… Passware Kit Mobile 2026 v4 expands Samsung S20 decryption coverage,… Join Cellebrite’s July 7 webinar to learn how responsible AI… Explore key highlights from Techno East 2026 and see what’s… Explore a selection of the latest DFIR employment opportunities in… Cellebrite Genesis uses agentic AI to help investigators analyse complex… Read the latest DFIR news – AI tools for...

Passware introduces a new decryption method for the Samsung S20/S20+/S20 Ultra, leveraging a bootrom vulnerability in the Qualcomm SM8250 chipset. The method applies to devices manufactured in early 2020. Combined with existing support for the S10 and Exynos-based S20 series, Passware Kit Mobile now provides full coverage across both Samsung lineups.

REGISTER NOW HERE AI has evolved rapidly, from helping investigators summarize reports and organize content to becoming a powerful tool for querying, correlating and understanding evidence across an entire case. But as AI capabilities advance, so do the questions: When should investigators rely on AI? What guardrails are necessary? How do agencies ensure transparency, defensibility and trust in AI-generated insights? 1.

The Techno Security & Digital Forensics Conference East 2026 once again brought together the global digital forensics, incident response, eDiscovery, and law enforcement communities for an unforgettable week of education, collaboration, and innovation in Myrtle Beach, South Carolina. With 710 attendees representing 19 countries, 41 states, and the District of Columbia, Techno East continues to serve as one of the industry’s premier independent events dedicated to advancing digital investigations.

A selection of the latest DFIR job vacancies (got a job you want to feature in the next round-up? Submit the details here): Countries in this round-up: United States (9) UK & Ireland (12) Canada (9) Singapore (9) Netherlands (9) Germany (9) Israel (6) India (3) South Africa (2) Role focus Work mode Seniority No jobs match the selected filters.

The following transcript was generated by AI and may contain inaccuracies. Paul: Today I’m joined by David Shipley, a former investigator who spent 16 years working in online safeguarding and abusive imagery investigations — a role that exposed him to some of the darkest aspects of human behaviour while helping protect countless victims.

When you are asked to examine a suspected deepfake, the first question is usually simple: is it real or fake? Forensic analysis, however, rarely works that way. A single AI-generated score, a detector warning, or a visual anomaly may be useful, but none of these should be treated as a conclusion on its own. If your findings may influence an investigation, support a report, or be challenged in court, you need a workflow that is explainable, reproducible, and defensible.

Discover how Cellebrite Genesis is helping investigators move faster through today’s growing volumes of digital evidence. Built for complex, multi-source investigations, Cellebrite Genesis uses agentic AI to help investigative teams analyse evidence, surface intelligence, identify connections, and move from data to actionable leads in minutes rather than days or weeks.

A round-up of this week’s digital forensics news and views: Industry News CSAM Investigators Face Growing Mental Health Crisis Officers investigating crimes against children face severe psychological trauma, a burden that is intensifying as AI-generated CSAM floods caseloads while government mental health resources are being cut. Many investigators are parents themselves, adding personal weight to cases involving child exploitation material.

You have a bunch of unlabelled drives that were removed from a server. There is no documentation. You have no idea where to start. Welcome to RAID forensics! This article explains the most common mistakes investigators make and how to avoid them without compromising evidence integrity. The standard field approach – pull the drives, image them individually, rebuild the RAID in software. Sounds methodical. In practice, it’s a technical minefield.