Blog
Security research and company news from Mobasi.
Introducing Mobasi
DFIR agents that investigate incidents across endpoints, cloud, and SaaS, and help your team respond to threats quickly.
News
Mobasi at DFRWS 2026 – Perspectives on Applying AI in Digital Forensics
DFRWS published the report from a practitioner-led session on AI in digital forensics casework, with Eoghan Casey, Jim Jones, Jessica Hyde, Cameron Kelley, and Chad Steel.
News
Sentinel update: cross-org event access fixed in Velociraptor
Velociraptor's WatchEvent API let a user with API access in one org stream live events from another org. Rapid7 fixed it in v0.77.3.
Research
Sentinel update: XXE file exfiltration fixed in FTK Imager
A crafted UFDR archive could make FTK Imager send files from the examiner's workstation to an attacker. Exterro fixed it in FTK Imager 8.3.
Research
Sentinel update: server crash fixed in Velociraptor
Any authenticated Velociraptor user could stop the server with one SetPassword request. Rapid7 fixed it in v0.77.2.
Research
Sentinel update: CVE records published for Arelle, Detect-It-Easy, and prior findings
CVE.org now lists fourteen Mobasi-related Sentinel records, including new Arelle and Detect-It-Easy disclosures and CVE links for earlier public findings.
Research
Sentinel update: command injection vulnerabilities remediated in UAC
Three command injection vulnerabilities in UAC (Unix-like Artifacts Collector) have been remediated upstream via our Sentinel program.
Research
Sentinel update: Sleuth Kit and ALEAPP fixes are now public
New public Sentinel disclosures now include three Sleuth Kit findings and an ALEAPP NQ Vault path traversal / RCE fix.
Research
Sentinel update: vulnerabilities remediated in NSA's Ghidra, Hayabusa, Memprocfs, & more
Since our initial January disclosures, additional vulnerabilities have been publicly disclosed and remediated across more forensic tools.
Research
Founding engineer: Own infrastructure as we scale
We're hiring our first engineer outside the three cofounders.
News
Mobasi discloses 3 vulnerabilities in bulk_extractor and unfurl
Our Sentinel program publicly disclosed three security vulnerabilities across two forensics tools.
Research
Announcing Sentinel: Securing open-source digital forensics tools
We're providing free security reviews for open-source forensics tools.
Research