MFSC-201: Online, Eastern Standard Time

Name: MFSC-201: Online, Eastern Standard Time
Start: 2026-03-09T00:00:00-04:00
End: 2026-03-13T23:59:59-04:00

March 9, 2026 - March 13, 2026

$3,199.00

Advanced Practices in Mac Forensics will be presented by SUMURI from March 09 – 13 2026, 8:00 AM to 5:00 PM EST.

Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics (MFSC-101) course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.

Participants will engage in teamwork-based learning, guided by instructors dedicated to ensuring no one is left behind.

Pre-requisite

Completion of MFSC-101 (or a comparable Mac Forensics course) is strongly recommended before taking MFSC-201.

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

Start your journey to certification and elevate your expertise today!

Note: Students will need access to a Mac computer running the current version of macOS for the course.

Item #2

Topics to include but are not limited to:

Advanced macOS Artifact Analysis

Deep dive into property lists, SQLite databases, bundle files, and library directories to uncover key forensic evidence.

Advanced macOS Artifact Analysis:

Deep dive into property lists, SQLite databases, bundle files, and library directories to uncover key forensic evidence.

User and System Activity Reconstruction:

Identify user account changes, network connections, attached devices, and hibernation states to build detailed timelines.

Mastering macOS Timestamps:

Learn how to interpret POSIX and Apple Extended Attribute timestamps to track file and system events accurately.

Comprehensive Log Analysis:

Extract and interpret data from unified logs, domain-specific logs, and application logs to reveal user actions and system events.

Application Deconstruction:

Perform static and dynamic artifact analysis of first- and third-party applications to uncover hidden or unsupported evidence.

Advanced Command Line for Forensics:

Utilize macOS terminal commands to locate, extract, and analyze artifacts quickly and efficiently.

Time Machine and FSEvents Forensics:

Recover historical snapshots, identify file changes, and track system activity over time.

RAM, Virtual Machine, and iOS Artifact Analysis:

Examine volatile memory, virtual machine images, and iOS data stored on Macs.

Custom Forensic Tool Development:

Learn to script your own acquisition, triage, and data collection tools in Bash and Python.

macOS Automation for Investigations:

Leverage AppleScript and Automator to streamline repetitive forensic tasks.

Secure Your Spot – Limited Seats Available!

Details

Start:: March 9, 2026
End:: March 13, 2026
Cost:: $3,199.00
Event Categories:: Advanced Practices in Mac Forensics, Macintosh Forensics Training

Tickets

The numbers below include tickets for this event already in your cart. Clicking "Get Tickets" will allow you to edit any existing attendee information as well as change ticket quantities.

MFSC-201 260309ON

This MFSC-201 US Eastern Online Course is open for registration and will be taught in the US Eastern Standard Time. Visit our website for more information.

$ 3,199.00

24 available