Intermediate Training Course
This course is designed for professionals with experience in forensics and an understanding of Mac forensics. Students will work with image files, software RAIDs, iPhone and iPod, and the HFS file system. The course will also cover advanced analysis techniques and provide students with an in-depth understanding of the BlackBag Mac Forensic Suite.
Duration
5 days.
Objectives
Upon completion of this course, you will be able to:
- Identify current Mac hardware and understand relevant forensic concepts as they relate to Mac OS X
- Understand the forensic significance of the latest version of the Mac Operating System
- Create and understand native image files
- Analyze the metedata from virtual machines
- Understand, build, and repair software RAIDs
- Recognize and image iPods
- Work with iPhone artifacts
- Explore the Hierarchical File System
- Explain how files are deleted and recovered
- Analyze multiple images with true-to-life case data
- Work with the BlackBag Forensic Suite
Audience
This course is intended for law enforcement and corporate forensic professionals with a significant understanding of computer forensics. This class is designed for computer forensic examiners who have worked Mac Forensic cases and have a solid understanding of Mac forensics.
Prerequisites
Introduction to Mac Forensics
Additional Notes
The last day of this course is reserved for certification / discussion and usually ends by noon.
Government employees can use GOV400 coupon code to save $400 off the registration price.
Outline
- Technology Update
- Review Fundamentals
- HFS Plus File System
- Third Party & Mac OS Image Files
- Software RAID
- File Recovery
- iPhone & iPod Analysis
- BlackBag Tool Training
- Practical Application
- Instructor Lead Discussion
- Written and Practical Exam
Course Testimonials
I really enjoyed the course but would have probably benefitted from a more basic course. Ryan was an excellent instructor - very knowledgeable and kept the class light and fun.
A valuable and worthwhile 5 days training. All my examiners will attend as soon as funding allows. Personally, many thanks guys great week, see you all at the Advanced class!
Excellent course! Definitely needed for anyone doing forensic exams on Macs. Instructors are extremely helpful and open to other ways of looking at things.
A very enjoyable course, a great follow on from the intro course. Highly recommended for anyone who wants to learn about Mac Forensics. Looking forward to the advanced course.
Very well presented and learned a lot. Ryan obviously 'knows his onions' as well as his Apples. Very enjoyable and looking forward to the advanced class.
BlackBag Technologies sets the standard for Macintosh Forensics Training. Even veterans of Macintosh discovery will learn much from their training.
As a lead forensics instructor for the State of California for the last 8 years, I have found that Blackbag is the industry leader when it comes to Mac forensic training. I strongly recommend their courses for examiners needing this skill set.
This is a Great class! I feel very confident that when I get back to the lab I would be able to complete a Mac exam. This class and the instructors have given me all the tools for success.
My clients will immediately benefit from the data recovery techniques covered for all Apple devices in the Intermediate Course. I look forward to completing the series with the Advanced Course in June.
Ryan was, as always in my experience, a great instructor. I will be back to the Advanced and iPhone/Touch/iPad classes. Derrick also did a wonderful job as a fill in at the last moment.
This is by far the best MAC forensic class I have attended. The training was realistic and the tools are great. Anyone doing forensics involving a MAC system should attend this class or risk missing a great deal of data.
With knowledgeable and extremely courteous staff, Blackbag Technologies provided me with a great course and an awesome one-on-one learning experience. I am glad that I took this course and I am looking forward to the Advanced course!
Excellent course overall, good solid instructors with loads of experience. See you on the advanced course next year!!
"This is a fantastic class to learn how to address the unique forensic challenges presented by Apple computers."
Great training, great instructor.
