Cybercop 325 - Macintosh® Forensic Analysis

Monday Jun 16, 2014 - 12:00pm EDT to Thursday Jun 19, 2014 - 09:00pm EDT
Event Description: 

There is no tuition fee for this NW3C class for anyone actively employed with a State, Local or Tribal Law Enforcement agency.

For any class with a duration of 2 days or more, NW3C will charge Federal employees $750.00 per student. Agencies will receive an invoice upon completion of the training.

This 4 day course begins by detailing the partitioning schemes (including Apple® Partition Map, GUID Partition Table, and Master Boot Record) supported by Mac OS X®. Next is an examination of the HFS+ file system to understand how Mac OS X’s® default file system stores data, what changes occur when data is deleted, and how to recover deleted data. Focus will then shift to the forensic analysis of Mac OS X® operating system and application artifacts. Topics covered will include the Mac OS X® default folder structure, system configuration, recently opened files and applications, handling encryption issues, built-in applications artifacts (Safari®, Mail, Messages®, iTunes®, FaceTime®, iPhoto®, Time Machine®, etc), and popular third party applications artifacts (Chrome, FireFox, Skype, etc)

This course is designed for students who already have a solid understanding of computer forensic principles, have prior experience preserving and collecting data of evidentiary value from an Apple® Macintosh® computer, and are already comfortable navigating and using Mac OS X®. Students will use Mac OS X® and other third party tools, both free and commercial, currently in use by practitioners in the field.

PREREQUISITES: This course requires the student to have successfully completed Cybercop 215 – Macintosh® Triage and Imaging or have equivalent training and/or experience.

There are 3 MFA classes currently scheduled:

Mon, Jun 16, 2014
4 Days
East Precinct
2575 North Courtenay Parkway
Merritt Island, FL 32952 I
Instructor Not Set

Mon, Oct 06, 2014
4 Days
East Precinct/Headquarters
3035 Lexington Road
Athens, GA 30605
Instructor Not Set

Tue, Dec 02, 2014
4 Days
Waterfront Commission of New York Harbor
100 Columbia Street
Brooklyn, NY 11201
Instructor Not Set

Event Cost Information
See Registration Link
Organizer Information
Event Organization: 
Event POC Email: