Course not currently available
Mac OS X Forensics
Short course
In Bedfordshire ()
Price on request
Description
-
Type
Short course
Course structure The course is a 5 day residential. The final day consists of a 3 hour practical examination. The entire course is taught in the computer lab using Apple Macs.
Reviews
Have you taken this course?
Subjects
- Mac OS
- Mac-OS
- Mac
Course programme
What you will learn
Core content
On successful completion of this course those attending will be able to:
- Analyse Mac OS X digital forensics artefacts at various levels of abstraction, including those related to partitioning, file systems and the operating system
- Analyse the artefacts left on disk by built-in applications on Mac OS X
- Construct and carry out a suitable digital forensic analysis approach for an Apple Mac
- Evaluate the use of Mac OS X for conducting an examination of an Apple Mac against traditional digital forensics tools.
Core content
- Installation of Mac OS X
- Use of Mac OS X Terminal
- The Mac OS X boot process
- Acquiring disk images using Mac OS X
- Mounting disk images on Mac OS X
- Identification of disks and partitions on Mac OS X including APM, MBR and GPT
- The HFS+ file system
- Bundles and packages
- Property Lists
- Safari browser analysis
- Mail application analysis
- Use of Spotlight
- Log file locations and analysis
- User accounts and FileVault
- iOS backups and connected devices
- PDFs and printing.
Mac OS X Forensics
Price on request