Course not currently available

Mac OS X Forensics

Short course

In Bedfordshire ()

Price on request

Description

  • Type

    Short course

Course structure The course is a 5 day residential. The final day consists of a 3 hour practical examination. The entire course is taught in the computer lab using Apple Macs.

Questions & Answers

Add your question

Our advisors and other users will be able to reply to you

Fill in your details to get a reply

We will only publish your name and question

Reviews

Subjects

  • Mac OS
  • Mac-OS
  • Mac

Course programme

What you will learn

On successful completion of this course those attending will be able to:

  • Analyse Mac OS X digital forensics artefacts at various levels of abstraction, including those related to partitioning, file systems and the operating system
  • Analyse the artefacts left on disk by built-in applications on Mac OS X
  • Construct and carry out a suitable digital forensic analysis approach for an Apple Mac
  • Evaluate the use of Mac OS X for conducting an examination of an Apple Mac against traditional digital forensics tools.

Core content
  • Installation of Mac OS X
  • Use of Mac OS X Terminal
  • The Mac OS X boot process
  • Acquiring disk images using Mac OS X
  • Mounting disk images on Mac OS X
  • Identification of disks and partitions on Mac OS X including APM, MBR and GPT
  • The HFS+ file system
  • Bundles and packages
  • Property Lists
  • Safari browser analysis
  • Mail application analysis
  • Use of Spotlight
  • Log file locations and analysis
  • User accounts and FileVault
  • iOS backups and connected devices
  • PDFs and printing.

Mac OS X Forensics

Price on request