MFD 2026 Article Collection
Unofficial English translation of the Russian collection. Read in Russian.
Over the past ten years, MFD (Moscow Forensics Day) has become not only the largest digital-forensics event in Russia and friendly countries, but has also brought us many interesting acquaintances and friends — true professionals in their field. Forensics is many-faceted, diverse and fascinating! As one of the gifts for our anniversary, we asked our friends, who specialize in various aspects of digital forensics, to write articles for you. We hope you will find them interesting and useful. Happy reading!
Articles from our friends
- 1 How to Improve Poor-Quality CCTV Photos and Video Let's recall what happens when we get footage from a CCTV system: the camera saw a person, a car made it into the frame, the license plate seems to be there. Hooray! We can go straight after the bad guy! But then you open the…
- 2 A Practical Study of Signal Desktop: Problems, Approaches and Solutions One of the most important sources of forensically relevant digital information is instant messaging software (systems), commonly referred to by users as "messengers." Among the wide variety of existing software, it is messengers…
- 3 Hunting for Backdoors in Local LLMs (Large Language Models) Disclaimer: all material in this article is presented solely for educational purposes, to raise awareness of security risks. The author neither pursues nor endorses any malicious goals. Readers bear full responsibility for how…
- 4 We Tested the Defenses — and Found an Attack We Tested the Defenses — and Found an Attack. How a pentester can shift gears into an Incident Response scenario. And why, for the client, this matters more than even the most thorough report
- 5 The 2000s Vibe as a 2026 Threat: Investigating Intrusions via NetScaler Have you ever heard of NetScaler ADC or Gateway? If you have worked in large organizations, the answer is almost certainly yes.
- 6 Tampering with Messages in Email Archives Today it is hard to imagine any organization operating without email. Classic attacks on email typically rely on social engineering and compromised mailboxes. But what can happen if an attacker is already inside the perimeter and…
- 7 Forensics of Virtual Android Device Images To many people, virtual Android devices are "toys" — something to play World of Tanks on or to farm likes with. But to forensic examiners, they are full-fledged guest operating systems that live on top of a hypervisor (QEMU/KVM…