MFSC-201: Online, Eastern Daylight Time
2026-08-31 - 2026-09-04
Advanced Practices in Mac Forensics will be presented by SUMURI from August 31 – September 4, 2026, 8:00 AM to 5:00 PM EDT.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics (MFSC-101) course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
Participants will engage in teamwork-based learning, guided by instructors dedicated to ensuring no one is left behind.
Pre-requisite
Completion of MFSC-101 (or a comparable Mac Forensics course) is strongly recommended before taking MFSC-201.

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
Start your journey to certification and elevate your expertise today!

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

Item #2

Topics to include but are not limited to:

Advanced macOS Artifact Analysis

Deep dive into property lists, SQLite databases, bundle files, and library directories to uncover key forensic evidence.

Advanced macOS Artifact Analysis:

Deep dive into property lists, SQLite databases, bundle files, and library directories to uncover key forensic evidence.

User and System Activity Reconstruction:

Identify user account changes, network connections, attached devices, and hibernation states to build detailed timelines.

Mastering macOS Timestamps:

Learn how to interpret POSIX and Apple Extended Attribute timestamps to track file and system events accurately.

Comprehensive Log Analysis:

Extract and interpret data from unified logs, domain-specific logs, and application logs to reveal user actions and system events.

Application Deconstruction:

Perform static and dynamic artifact analysis of first- and third-party applications to uncover hidden or unsupported evidence.

Advanced Command Line for Forensics:

Utilize macOS terminal commands to locate, extract, and analyze artifacts quickly and efficiently.

Time Machine and FSEvents Forensics:

Recover historical snapshots, identify file changes, and track system activity over time.

RAM, Virtual Machine, and iOS Artifact Analysis:

Examine volatile memory, virtual machine images, and iOS data stored on Macs.

Custom Forensic Tool Development:

Learn to script your own acquisition, triage, and data collection tools in Bash and Python.

macOS Automation for Investigations:

Leverage AppleScript and Automator to streamline repetitive forensic tasks.

Secure Your Spot – Limited Seats Available!

2026 NW ICAC & Technology Conference
2026-09-21 - 2026-09-24 | Hyatt Regency Bellevue, 900 Bellevue Way NE, Bellevue, WA 98004, United States
Join SUMURI at the NW ICAC & Technology Conference 2026!
SUMURI is proud to participate in the NW ICAC & Technology Conference, a premier event focused on combating crimes committed online against children. This important conference brings together law enforcement professionals, investigators, prosecutors, and technology experts dedicated to protecting children and holding offenders accountable.
The conference provides a platform to share knowledge, training, and tools that strengthen the ability of professionals to investigate internet crimes against children and support victims. Attendees will gain valuable insights through expert-led sessions, networking opportunities, and technology demonstrations throughout the week.

Event Details:
Dates: September 21 – 24, 2026
Location: Hyatt Regency Bellevue
Address: 900 Bellevue Way NE, Bellevue, WA 98004, United States
Booth Staff: Jason and Dakota
Booth #: TBA
Why Visit SUMURI at NW ICAC?

Explore Industry-Leading Software
Get hands-on with our powerful digital forensic tools, including RECON LAB, RECON ITR, and PALADIN.
Experience TALINO® Workstations
Discover how our high-performance forensic systems are purpose-built for speed, reliability, and precision in digital investigations.
Support ICAC Investigations
Learn how our solutions are designed to assist investigators working on sensitive cases, including internet crimes against children.
Meet the Experts
Connect with our team of forensic professionals and technology experts who are driving innovation in digital forensics.
Celebrate a Shared Mission
Join professionals from across the industry who are committed to protecting children, delivering justice, and advancing investigative capabilities.

Throughout the week, attendees can explore sessions, exhibitors, sponsors, confirmed speakers, and networking events designed to strengthen collaboration and knowledge sharing within the ICAC community.
Visit SUMURI during the conference to see our latest digital forensic solutions and learn how we support investigators working on critical cases around the world.
We look forward to seeing you at the NW ICAC & Technology Conference 2026!
