Blog Buying Your First Forensic Workstation: What Actually Matters Buying your first forensic workstation, or planning the replacement of an older system, is a major decision for any examiner. Read More » February 10, 2026 No Comments
Blog From Safeback to Forensic Write Blockers: A 30-Year Evolution in Data Integrity If you’ve been in the game as long as I have, you remember the “floppy disk shuffle.” Before we had Read More » February 5, 2026 No Comments
Blog Why macOS Artifacts Don’t Behave Like Windows Artifacts (And Never Will) Experienced DFIR practitioners often acknowledge that macOS is “different” from Windows. Where investigations most often go wrong is not in Read More » February 3, 2026 No Comments
Blog America’s Top Cyber Detectives: Inside the War on Child Exploitation In a small, inconspicuous premises at a secret address in Texas, two police investigators, Jeff Rich and Chris Meehan, are Read More » January 29, 2026 No Comments
Blog The Death of Physical Imaging: Understanding the New Standard in Mac Forensics If you have been in digital forensics for more than a decade, you probably learned the golden rule of acquisition Read More » January 13, 2026 No Comments
Blog macOS 26 Tahoe Introduces New Image Formats: What Examiners Need to Know Apple’s release of macOS 26 “Tahoe” brought several cosmetic changes and cloud-focused apps, but one of the most significant forensic Read More » September 23, 2025 No Comments