DF320 Advanced Digital Forensic Analysis: macOS
- https://www.rcfl.gov/greater-houston/training-schedule/df320-advanced-digital-forensic-analysis-macos
- DF320 Advanced Digital Forensic Analysis: macOS
- 2020-03-23T00:00:00-04:00
- 2020-03-26T23:59:59-04:00
- Teaches students to identify and collect volatile data, acquire forensically-sound images of Apple Macintosh computers, and perform forensic analysis of macOS operating system and application artifacts.
- When Mar 23, 2020 to Mar 26, 2020 (US/Eastern / UTC-400)
- Where GREATER HOUSTON REGIONAL COMPUTER FORENSIC LABORATORY
- Web Visit external website
- Add event to calendar iCal
This course teaches students to identify and collect volatile data, acquire forensically-sound images of Apple Macintosh computers, and perform forensic analysis of macOS operating system and application artifacts. Students gain hands-on experience scripting and using automated tools to conduct a simulated live triage, and use multiple methods to acquire forensically-sound images of Apple Macintosh computers. Topics include how the macOS default file system stores data, what happens when files are sent to the macOS Trash, where operating system and application artifacts are stored, and how they can be analyzed. Forensic artifacts covered include password recovery, recently-opened files and applications, encryption handling, Mail, Safari, Messages, FaceTime, Photos, Chrome, and Firefox.