MOSCOW FORENSICS DAY ’25
The ninth digital forensics conference. 11–12 September 2025, Moscow, Pulsar venue. Organizer: MKO Systems.
The transcript, summaries and slides of the twenty talks of the ninth MFD. Everything is made from the published video recording.
RecordingWatch on YouTube9 h 33 min. Both days’ streams are joined into one video; the breaks and the closed-door part are not in it.
Conference siteevents.mko-systems.ru/mfdThe official MFD page. The program there is the current year’s, not 2025’s.
Materials
- SummariesA breakdown of every segment: what was said in substance, tools and artifacts, questions from the audience, the speaker’s position.22 breakdowns + the conference in one document
- TranscriptWhat was said from the stage, word for word — the introduction, the talk and the questions. The same text that runs as subtitles on YouTube.22 segments · 76,984 words
- SlidesThe slides shown in the recording, with a timecode on every page. The PDF of each deck is there to download.19 decks · 428 pages
- The MFD ’26 siteThe tenth conference, 3–4 September 2026: transcript, summaries, slides, the authors’ articles and a comparison of the two years.11 segments · 7 articles
The program and the recording
Day 1Thursday, 11 September 2025: digital forensics day
- ·Conference openingDmitry Yankovoy (moderator), Olga Gutman (MKO Systems)
- 01
- 02Dictionary or mask: how MK Brute Force worksValeria Vakhrushina · MKO Systems
- 03Specifics of accelerating password brute-forcing on mobile devicesVyacheslav Chikin · ACE Lab
- 04A standard methodology for examining information stored on mobile devices and their componentsOlga Tushkanova · Main Forensic Directorate of the Investigative Committee of Russia, GUK SK
- 05Applying forensic methods to investigate thefts committed with NFC technologyAlexey Moskvichev · MKO Systems
- 06UAVs on the line of contact and in rear areas. Methods of use and countermeasuresIgor Zaitsev · Account-Best · not in the recording
- 07Using VR-EXPERT to examine DVRs. A comparison with foreign counterpartsSergey Eremin · LAN PROJECT
- 08SpyNote in action: how a mobile spyware trojan is created, deployed and examinedNatalia Kotova · Forensic Science Centre of the Yaroslavl Regional Police, EKC UMVD
- 09Examining information by dynamic analysis on macOS-based personal computersAndrey Shavlovsky · Forensic Expert Centre of the Investigative Committee of Russia, SEC SK
- 10Identifying the owners, administrators and developers of web resourcesIgor Bederov · T.Hunter, Internet-Rozysk
Day 2Friday, 12 September 2025: information security day
- 11How does OSINT affect information security?Yuri Barkalov · Forensics Science Centre
- 12
- 13
- 14The value of security tools: what we wouldn't have if we had everythingNikita Vyugin · MKO Systems
- 15
- 16How not to end up needing forensics, and what to do if it can't be avoidedKonstantin Titkov · Gazprombank
- 17
- 18
- 19Automated government systems under the forensic computer expert's microscope: problems and solutionsOleg Bezik · Digital Research Laboratory
- 20From audio and video data to evidence: AI analytics, biometrics, and spoofing and deepfake detectionMikhail Inkin · STC, Speech Technology Center
- ·
Not in the recording
The recording covers almost the whole program: the opening, twenty talks and the closing. Missing is the closed-door talk by Igor Zaitsev (Account-Best) on UAVs: before it the moderator warned that this talk would not be streamed, and the stream came back only after the break.
The evening part of day 1 — the "roast", the prize draw and the informal networking — was deliberately not streamed: the day 1 broadcast ended right after Igor Bederov’s talk. The breaks did not make it into the recording.