AccessData Mac Forensics Training
This advanced course provides students with the knowledge and skills necessary to analyze Macintosh OS X operating system artifacts and file system mechanics.
Students will discuss Macintosh architecture, HFS(+) based file systems, alternate methods of data acquisition, plist and SQLite artifact processing, Macintosh® FileVault® decryption (including shadow file attacks), address book and chat archives, Internet artifacts related to Safari and Firefox, as well as iPod® and iPhone™ analysis.
Students will learn advanced filtering and searching techniques related to Macintosh. Attendees should be conducting computer-related investigations and be familiar with the AccessData suite of tools.
| Dates available in 2010 | Course Type | Venue |
24-26 Aug | Mac Forensics | Manchester |
Dates available in 2011 | Course Type | Venue |
1-3 Feb | Mac Forensics | London |
31 May-02 Jun | Mac Forensics | London |
25-27 Oct | Mac Forensics | Live On-Line (LOT) |
13-15 Dec | Mac Forensics | London |