AccessData Mac Forensics Training
This advanced course provides students with the knowledge and skills necessary to analyze Macintosh OS X operating system artifacts and file system mechanics.
Students will discuss Macintosh architecture, HFS(+) based file systems, alternate methods of data acquisition, plist and SQLite artifact processing, Macintosh® FileVault® decryption (including shadow file attacks), address book and chat archives, Internet artifacts related to Safari and Firefox, as well as iPod® and iPhone™ analysis.
Students will learn advanced filtering and searching techniques related to Macintosh. Attendees should be conducting computer-related investigations and be familiar with the AccessData suite of tools.
Dates available in 2012 | Course Type | Venue |
03 Apr - 05 Apr | Mac Forensics | London |
14 Aug - 16 Aug | Mac Forensics | London |
06 Nov - 08 Nov | Mac Forensics | London |