This course addresses the need for Macintosh forensics training that is practical to the front-line forensics examiner. The training is designed for the student to learn what is needed with a no one left behind attitude in a team work atmosphere through hands on training. Our training will allow you to walk away with the skills necessary to properly seize, acquire, analyze and document your examination of an Intel-based Macintosh computer in a forensically sound manner. In addition, we provide instruction on the forensic seizure and examination of Apple iPod devices.
Specifically you will learn:
- Mac as a Forensic Platform
- Hardware Identification
- Obtaining System Date and Time
- Capturing Volatile Data
- Acquisition Methodology
- Open Firmware Passwords
- FileVault
- Email
- Graphics
- Internet Artifacts
- Documents
- Non-Intel Mac Forensic Issues
- iPod Forensics
- and much more!
This five-day, hands on course will provide the attendee with the knowledge and skills to conduct forensic analysis of Macintosh computers and related devices. A boot CD is provided for imaging Intel Macs, iPod Nano and more.
back to top
