Cybercop 325 - Macintosh® Forensic Analysis

    Event Type: 
    Training Delivery - Classroom Training/Onsite
    Monday Jun 16, 2014 - 12:00pm EDT to Thursday Jun 19, 2014 - 09:00pm EDT
    Event Description: 

    There is no tuition fee for this NW3C class for anyone actively employed with a State, Local or Tribal Law Enforcement agency.

    For any class with a duration of 2 days or more, NW3C will charge Federal employees $750.00 per student. Agencies will receive an invoice upon completion of the training.

    This 4 day course begins by detailing the partitioning schemes (including Apple® Partition Map, GUID Partition Table, and Master Boot Record) supported by Mac OS X®. Next is an examination of the HFS+ file system to understand how Mac OS X’s® default file system stores data, what changes occur when data is deleted, and how to recover deleted data. Focus will then shift to the forensic analysis of Mac OS X® operating system and application artifacts. Topics covered will include the Mac OS X® default folder structure, system configuration, recently opened files and applications, handling encryption issues, built-in applications artifacts (Safari®, Mail, Messages®, iTunes®, FaceTime®, iPhoto®, Time Machine®, etc), and popular third party applications artifacts (Chrome, FireFox, Skype, etc)

    This course is designed for students who already have a solid understanding of computer forensic principles, have prior experience preserving and collecting data of evidentiary value from an Apple® Macintosh® computer, and are already comfortable navigating and using Mac OS X®. Students will use Mac OS X® and other third party tools, both free and commercial, currently in use by practitioners in the field.

    PREREQUISITES: This course requires the student to have successfully completed Cybercop 215 – Macintosh® Triage and Imaging or have equivalent training and/or experience.

    There are 3 MFA classes currently scheduled:

    Mon, Jun 16, 2014
    4 Days
    East Precinct
    2575 North Courtenay Parkway
    Merritt Island, FL 32952 I
    Instructor Not Set

    Mon, Oct 06, 2014
    4 Days
    East Precinct/Headquarters
    3035 Lexington Road
    Athens, GA 30605
    Instructor Not Set

    Tue, Dec 02, 2014
    4 Days
    Waterfront Commission of New York Harbor
    100 Columbia Street
    Brooklyn, NY 11201
    Instructor Not Set

    Event Cost Information
    Description
    See Registration Link
    Organizer Information
    Provider: 
    National White Collar Crime Center
    Event Organization: 
    Event POC Email: 
    training@nw3c.org
    Program Areas: 
    Justice Information Sharing