Loading Events

201 New Events Mockup 2024

July 16

Advanced Practices in Mac Forensics will be presented by SUMURI from December 09 – 13, 2024, 8:00 AM to 5:00 PM EST.

Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics (MFSC-101) course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.

MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. Completion of MFSC-101 (or comparable Mac Forensics course) is strongly recommended before taking MFSC-201. The knowledge you gain from our training can be applied to any forensic tool on any platform.

SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/This course is open for registration and will be taught in the US Eastern Standard Time Zone.

Students will be introduced to the concept of domains within the macOS environment and be able to locate evidentiary artifacts in each. Additionally, students will learn how to deconstruct any installed application manually.
Underneath macOS’s interface and desktop is the Unix shell, including a Terminal that gives users unlimited power and control from the “command line.” Participants will learn advanced tips using the “command line” to assist in forensic examinations of a Mac.
Included with macOS are two native applications AppleScript and Automator. These apps allow the user to develop custom programs and workflows to automate almost any task.
Participants will learn how to create their own AppleScript and Automator applications to simplify and enhance their forensic examinations and build their own forensic examination tools.
Learn how to identify artifacts from persistent and volatile logs, including Apple’s Unified Logs.
Work with live File System Events to identify artifacts quickly. Learn how to parse stored File System Events to determine the history of file and application usage on a volume or disk.
Participants will learn how to identify VM artifacts within macOS and the procedures necessary to analyze them.
Participants will learn about macOS RAID technologies. Mac Timeline Analysis – Building a file system timeline can retrace the suspect’s history minute by minute or second by second. SUMURI helps the participant understand Mac timestamps and use them for analysis.
Participants will learn how to find and analyze documents, and other data synced with an Apple iCloud account.
Understand the Time Machine backup process and structure in order to find data.
Participants will be provided with best practices and resources to deal with troublesome and unique Apple technology.
SUMURI shows the user how to conduct advanced indexed and live searches to find any data.
Participants will learn how to find any and all artifacts left behind by any application.
Learn how the macOS stores data concerning Apple’s newest devices and how to analyze it.
We will explore how iOS backups are stored on a macOS device and collect log information from an iPhone using a Mac.
MFSC 101 and 201 Tickets
GET YOUR SEATS NOW FOR ONLY
$
3,199

Tickets

The numbers below include tickets for this event already in your cart. Clicking "Get Tickets" will allow you to edit any existing attendee information as well as change ticket quantities.
Tickets are no longer available

If you would like to procure a seat via Purchase Order, kindly reach out to sales@sumuri.com. If you would like to pay over time with four easy monthly payments using our Installment Plan, kindly reach out to training@sumuri.com.

UPCOMING EVENTS

2025 Techno Security & Digital Forensics Conference

Wilmington Convention Center, 10 Convention Center Dr, Wilmington, NC 28401, USA

June 3 - June 5

2025 National Cyber Crime Conference

Four Points by Sheraton Norwood

April 29 - May 1

Tickets

The numbers below include tickets for this event already in your cart. Clicking "Get Tickets" will allow you to edit any existing attendee information as well as change ticket quantities.
Tickets are no longer available
MFSC-201 Online Hong Kong
Scroll to Top