Schedule

This course is designed for forensic professionals with significant experience in forensics and a solid understanding of Mac forensics. Students will study the AppleTV and Time Capsule, track down passwords, work with FileVault images, and go hands on with the xServe and xServe RAID hardware. In addition, the course will cover advanced analysis techniques and provide students with a working knowledge of the BlackBag Mac Forensic Suite.

This course is designed for forensic professionals with no prior experience working in a Mac environment. This course will lay the foundation for using and understanding Mac hardware and software from an analysis perspective. Students will gain a broad understanding of the Mac operating system along with learning a handful of tools and processes written specifically for the first responder. The class will provide scenario and lecture instruction which will help students better understand how suspects use and store files on their Macs with a focus on retrieving potential evidence. Additionally, students will learn how to conduct forensically sound previews of Mac systems with the intent of deciding whether there is a need for further analysis or not.  Students learn through a combination of course instruction and hands on practical case studies.

This course is designed for professionals with experience in forensics and an understanding of Mac forensics. Students will work with image files, software RAIDs, iPhone and iPod, and the HFS file system.  The course will also cover advanced analysis techniques and provide students with an in-depth understanding of the BlackBag Mac Forensic Suite.

This course is designed for forensic professionals with limited experience in Mac forensics. The course will equip students with a basic understanding of Macintosh file structures, imaging procedures and analysis solutions uniquely designed to effectively recover evidence from a Mac drive. Students learn through a combination of course instruction and case studies.

This course is designed for forensic professionals with limited experience in Mac forensics. The course will equip students with a basic understanding of Macintosh file structures, imaging procedures and analysis solutions uniquely designed to effectively recover evidence from a Mac drive. Students learn through a combination of course instruction and case studies.

This course is designed for professionals with experience in forensics and an understanding of Mac forensics. Students will work with image files, software RAIDs, iPhone and iPod, and the HFS file system.  The course will also cover advanced analysis techniques and provide students with an in-depth understanding of the BlackBag Mac Forensic Suite.

This course is designed for forensic professionals with limited experience in Mac forensics. The course will equip students with a basic understanding of Macintosh file structures, imaging procedures and analysis solutions uniquely designed to effectively recover evidence from a Mac drive. Students learn through a combination of course instruction and case studies.