DF320 Advanced Digital Forensic Analysis: macOS (Aug. 9–12, 2021, Virtual)
This course prepares students to identify various artifacts typically located in property lists and SQLite databases on MacOS-based computers, and teaches students how to perform forensic analysis. Students gain hands-on practical experience writing basic SQL queries and using them to analyze operating system artifacts that include, but are not limited to, user login passwords, FaceTime, messages, mail, contacts, calendars, reminders, notes, photos, Safari, Google Chrome, and Mozilla Firefox.