Basic Training Course
This course is designed for forensic professionals with no prior experience working in a Mac environment. This course will lay the foundation for using and understanding Mac hardware and software from an analysis perspective. Students will gain a broad understanding of the Mac operating system along with learning a handful of tools and processes written specifically for the first responder. The class will provide scenario and lecture instruction which will help students better understand how suspects use and store files on their Macs with a focus on retrieving potential evidence. Additionally, students will learn how to conduct forensically sound previews of Mac systems with the intent of deciding whether there is a need for further analysis or not. Students learn through a combination of course instruction and hands on practical case studies.
Duration
3 days.
Objectives
Upon completion of this course, the student will be able to:
- Identify current and past Mac hardware
- Understand the forensic relevance of Mac hardware and accessories
- Navigate and interact with the Mac OS X graphical user interface
- Possess an understanding of where common files are stored
- Search for and identify relevant file information
- Make preliminary determinations on what is contained on previewed systems
Audience
This course has been specifically designed for law enforcement and corporate professionals who will have initial contact with Mac system yet have limited or no experience with the Mac.
Prerequisites
Participants should have a limited understanding of the computer forensic process.
Additional Notes
The afternoon of the last day of this course is reserved for the written and practical assessment and may end before the posted time.
Government employees can use GOV300 coupon code to save $300 off the registration price.
Outline
- Using Mac OS X
- Identification of Mac Systems
- Familiarization with Forensic Relevance of the Mac
- Preview and Consequent Seizure of Mac Systems
- Hands on Tools Training
- On-Scene Preview and Analysis
- Instructor Lead Discussion
- Written and Practical Exam