Advanced Training Course
This course is designed for forensic professionals with significant experience in forensics and a solid understanding of Mac forensics. Students will study the AppleTV and Time Capsule, track down passwords, work with FileVault images, and go hands on with the xServe and xServe RAID hardware. In addition, the course will cover advanced analysis techniques and provide students with a working knowledge of the BlackBag Mac Forensic Suite.
Duration
5 days.
Objectives
Upon completion of this course, you will be able to:
- Identify current Mac hardware and understand relevant forensic concepts as they relate to Mac OS X
- Recognize the fundamentals skills learned in earlier BlackBag courses
- Understand how to look for and use passwords on a source system
- See the importance of Mac accessories as they relate to forensics
- Work with an Xserve to ensure proper handling
- Analyze multiple images with true-to-life case data
- Explore BlackBag and third party forensic tools
- Explain how and when these forensic tools work most efficiently
Audience
This course is intended for law enforcement and corporate forensic professionals with a significant understanding of computer forensics. This class is designed for advanced computer forensic users with existing Mac Forensic experience and knowledge.
Prerequisites
Introduction to Mac Forensics.
Intermediate Study of Mac Forensics.
Additional Notes
The last day of this course is reserved for certification / discussion and usually ends by noon.
Government employees can use GOV400 coupon code to save $400 off the registration price.
Outline
- Technology Update
- Review Fundamentals
- File Vault
- Encryption
- Password Cracking
- Password Recovery
- Networks
- AppleTV / Airport
- xServe
- Practical Application
- Instructor Lead Discussion
- Written and Practical Exam
Course Testimonials
Everyone doing Mac examinations should do specific Mac courses and I would have no hesitation in recommending Blackbag for training on Mac Forensics.
Professional grade! Top notch facility and instructors.