BEGIN:VCALENDAR VERSION:2.0 PRODID:-//SUMURI - ECPv6.15.18//NONSGML v1.0//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:SUMURI X-ORIGINAL-URL:https://sumuri.com X-WR-CALDESC:Events for SUMURI REFRESH-INTERVAL;VALUE=DURATION:PT1H X-Robots-Tag:noindex X-PUBLISHED-TTL:PT1H BEGIN:VTIMEZONE TZID:America/New_York BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20250309T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20251102T060000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20260308T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20261101T060000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20270314T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20271107T060000 END:STANDARD END:VTIMEZONE BEGIN:VEVENT DTSTART;VALUE=DATE:20260427 DTEND;VALUE=DATE:20260502 DTSTAMP:20260404T181846 CREATED:20250905T172742Z LAST-MODIFIED:20251015T144647Z UID:272553-1777248000-1777679999@sumuri.com SUMMARY:MFSC-101: Orlando\, Florida DESCRIPTION:Best Practices in Mac Forensics will be presented by SUMURI from April 27 – May 1\, 2026\, 8:00 AM to 5:00 PM EDT. \nSUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order. \nMFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch\, just Mac forensics! \n \n  \nMFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME).\nStart your journey to certification and elevate your expertise today! \n \n \n \n \n \n \n \n\n Note:\n \n Students will need access to a Mac computer running the current version of macOS for the course.\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n Register Here\n \n \n \n \n \n \n \n Topics to include but are not limited to: \n \n \n \n \n \n \n \n \n \n \n Overview of macOS Versions\n \n Identifies features of forensic importance in different macOS and when they appeared \n \n \n \n Overview of macOS Versions\n \n Identifies features of forensic importance in different macOS and when they appeared \n \n \n \n Understanding the Mac File System Technology\n \n A review of all file system technology supported by macOS such as APFS\, Core Storage\, Fusion Drives\, and macOS Extended \n \n \n \n Intel Mac Technology and Bootcamp\n \n Explains the forensic significance of Mac Intel Technology \n \n \n \n Silicon Mac Technology\n \n Explains the unique issues and forensic significance of M1 Silicon Technology \n \n \n \n Mac Security Issues and FileVault Attacks\n \n Current best practices for dealing with Mac Security \n \n \n \n Macintosh Search and Seizure\n \n Best practices for seizing Mac and iOS hardware \n \n \n \n Safely Obtaining System Information\n \n How to safely obtain system information without making changes to the evidence \n \n \n \n Open Firmware Passwords\n \n Explains OFP\, how to set and remove OFP if it is necessary \n \n \n \n Volatile Data Collection\n \n Discussion on unique issues concerning Mac Volatile Data\, methods to collect it\, and the need for a Trusted Utilities Disk \n \n \n \n Forensic Imaging\n \n Discussion and exercises on imaging Intel and M1 Silicon Macs to include issues present by Mac security features \n \n \n \n Imaging Mac RAM\n \n Discussion on the challenges in capturing RAM due to macOS security features \n \n \n \n Mounting Forensic Images in the macOS\n \n Safely mounting forensic images for Processing and analysis \n \n \n \n Indexing Forensic Images\n \n How to index forensic images using macOS \n \n \n \n Search Techniques Using macOS\n \n Creating custom search expressions 
from the command-line and GUI \n \n \n \n Locating Evidence\n \n How to identify\, analyze and extract macOS and application artifacts such as Email\, Graphics\, Internet Artifacts\, Documents\, System Artifacts\, Instant Messaging\, logs\, and more \n \n \n \n Recovering Deleted Files\n \n An exercise in manually recovering deleted files and the dangers of Mac optimization \n \n \n \n Examining SQLite Databases and PLIST files\n \n Examining the heart of Mac data storage \n \n \n \n Using macOS for Forensics\n \n How to utilize built-in macOS technology for forensics \n \n \n \n Report Development\n \n How to create native reports using the Mac to view data properly \n \n \n \n Recommendations for Mac Forensics system configuration and hardware\n \n Our recommendations for commercial and non-commercial tools to assist with Mac forensics. \n \n \n \n \n \n \n \n Secure Your Spot – Limited Seats Available! \n \n \n \n \n Don’t miss out on this opportunity to enhance your capabilities as a Mac forensic expert. Book your accommodation at the Caribe Royale Hotel here. Prefer other accommodations? Just be aware that conference center parking fees may apply. \n \n \n \n \n \n \n \n \n LIMITED TIME OFFER \n \n \n \n Use this coupon code below to get 15% discount. \n \n \n \n “MFSC15” URL:https://sumuri.com/event/mfsc-101-orlando-florida-2026/ CATEGORIES:Best Practices in Mac Forensics,Macintosh Forensics Training ATTACH;FMTTYPE=image/png:https://sumuri.com/wp-content/uploads/2024/10/101-IACIS-Event-Banner.png END:VEVENT END:VCALENDAR