SUMURI

MFSC-201: Online, Hong Kong
2025-01-20 - 2025-01-24
Advanced Practices in Mac Forensics will be presented by SUMURI from January 20 – 24 2025, 8:00 AM to 5:00 PM HKT.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics (MFSC-101) course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
Participants will engage in teamwork-based learning, guided by instructors dedicated to ensuring no one is left behind.
Pre-requisite
Completion of MFSC-101 (or a comparable Mac Forensics course) is strongly recommended before taking MFSC-201.

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
Start your journey to certification and elevate your expertise today!

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

Need to Hide

Topics to include but are not limited to:

Advanced File System Analysis

Introduction to the concept of domains within the macOS environment and locations of evidentiary artifacts and their contents.

Advanced Command Line

Work with macOS’ powerful and highly useful command-line interface to assist in forensic examinations of a Mac.

macOS Log Analysis

Learn how to identify artifacts from persistent and volatile logs, including Apple Unified Logs.

File System Event Monitoring and Analysis

Work with live and logged File System Events to identify artifacts and determine file usage history on a volume or disk.

Identifying and Analyzing Virtual Machines

Identify the use of a VM within macOS and the procedures necessary to analyze artifacts.

AppleScript and Automator

Learn to develop custom programs and workflows to automate almost any task to simplify and enhance forensic examinations.

macOS Server & Software RAIDs

Discussion on macOS server technology and Apple software RAIDs. Learn the best practices on handling servers and Apple RAIDs.

Macintosh Timeline Analysis

Understand and identify unique macOS metadata timestamps for use in building a timeline of a file system that can retrace the suspect’s history minute by minute or second by second.

iCloud Forensics

Find and analyze iCloud artifacts and data, such as documents, synced with an Apple iCloud account.

Time Machine Analysis

Understand the Time Machine backup process and structure in order to find data.

Unique Apple Technology

Lean the best practices and resources available to deal with unique Apple technology such as Air Tags and Continuity.

Advanced Search Techniques

Use advanced search techniques, both macOS native and 3rd party tools, to find evidentiary artifacts within the macOS.

Application Deconstruction

Learn how to find any and all artifacts left behind by installed, and in some cases uninstalled, applications.

Secure Your Spot – Limited Seats Available!

LIMITED TIME OFFER

Use this coupon code below to get 15% discount.

“MFSC15”

MFSC-101: Online, Hong Kong
2025-01-13 - 2025-01-17
Best Practices in Mac Forensics will be presented by SUMURI from January 13 – 17, 2025, 8:00 AM to 5:00 PM HKT.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
Start your journey to certification and elevate your expertise today!

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

Need to Hide

Topics to include but are not limited to:

Overview of macOS Versions

Identifies features of forensic importance in different macOS and when they appeared

Understanding the Mac File System Technology

A review of all file system technology supported by macOS such as APFS, Core Storage, Fusion Drives, and macOS Extended

Intel Mac Technology and Bootcamp

Explains the forensic significance of Mac Intel Technology

Silicon Mac Technology

Explains the unique issues and forensic significance of M1 Silicon Technology

Mac Security Issues and FileVault Attacks

Current best practices for dealing with Mac Security

Macintosh Search and Seizure

Best practices for seizing Mac and iOS hardware

Safely Obtaining System Information

How to safely obtain system information without making changes to the evidence

Open Firmware Passwords

Explains OFP, how to set and remove OFP if it is necessary

Volatile Data Collection

Discussion on unique issues concerning Mac Volatile Data, methods to collect it, and the need for a Trusted Utilities Disk

Forensic Imaging

Discussion and exercises on imaging Intel and M1 Silicon Macs to include issues present by Mac security features

Imaging Mac RAM

Discussion on the challenges in capturing RAM due to macOS security features

Mounting Forensic Images in the macOS

Safely mounting forensic images for Processing and analysis

Indexing Forensic Images

How to index forensic images using macOS

Search Techniques Using macOS

Creating custom search expressions  from the command-line and GUI

Locating Evidence

How to identify, analyze and extract macOS and application artifacts such as Email, Graphics, Internet Artifacts, Documents, System Artifacts, Instant Messaging, logs, and more

Recovering Deleted Files

An exercise in manually recovering deleted files and the dangers of Mac optimization

Examining SQLite Databases and PLIST files

Examining the heart of Mac data storage

Using macOS for Forensics

How to utilize built-in macOS technology for forensics

Report Development

How to create native reports using the Mac to view data properly

Recommendations for Mac Forensics system configuration and hardware

Our recommendations for commercial and non-commercial tools to assist with Mac forensics.

Secure Your Spot – Limited Seats Available!

LIMITED TIME OFFER

Use this coupon code below to get 15% discount.

“MFSC15”

MFSC-201: Online, US Eastern Standard Time
2024-12-09 - 2024-12-13
Advanced Practices in Mac Forensics will be presented by SUMURI from December 09 – 13, 2024, 8:00 AM to 5:00 PM EST.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics (MFSC-101) course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. Completion of MFSC-101 (or comparable Mac Forensics course) is strongly recommended before taking MFSC-201. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open for registration and will be taught in the US Eastern Standard Time Zone.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC-101: Online, US Eastern Standard Time
2024-11-04 - 2024-11-08
Best Practices in Mac Forensics will be presented by SUMURI from November 04 – 08, 2024, 8:00 AM to 5:00 PM EST.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open for registration and will be taught in the US Eastern Standard Time Zone.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

10th NW ICAC & Technology Conference 2024
2024-10-07 - 2024-10-11 | Microsoft Campus, 5010 NE 36th St, Building 92 Redmond, WA 98052-5317, WA
SUMURI, an award-winning leader in digital forensics, is proud to collaborate with NW ICAC to co-host the NW ICAC & Technology Conference celebrating the 10th anniversary of both TALINO and NW ICAC.
Join us as we celebrate TALINO’s enduring legacy of innovation and dedication in the fight against internet crimes against children, reflecting many years of progress and unwavering commitment.
Mastering Mac Forensics: Hands-On Workshop for Triage, Acquisition, and Analysis by Chris Grettenberger and Steve Whalen at Utopia Conference Room.
Participants need to bring a Mac computer equipped with the latest macOS version, along with a user account that has administrator privileges.
This training is designed to equip participants with practical skills in Mac triage, acquisition, and the utilization of RECON ITR and LAB software. It’s structured to provide a balance of theory, practical demonstrations, and hands-on exercises.

Topics to be covered:

Initial assessment and challenges with Macs

Performing live triage

Overview of acquisition types

Dealing with encryption and password protection

Tools and methods for acquisitions

Demonstration of RECON ITR and RECON LAB

The Washington State Internet Crimes Against Children Task Force (WA ICAC TF) is a multi-jurisdictional group of agencies dedicated to the protection of children from sexual abuse and exploitation. The WA ICAC TF is one of 61 task force groups in the national ICAC Task Force Program which is administered by the US Department of Justice/Office of Juvenile Justice and Delinquency Prevention (OJJDP).

Meet the Experts:

Speaker 1

Chris Grettenbeger

Senior Forensic Specialist, SUMURI LLC

Speaker 2

Steve Whalen

Co-Founder, SUMURI LLC

Limited slots are available! Register Now!

HTCIA CANADA
2024-10-01 - 2024-10-03 | Palais des congrès de Gatineau
Join SUMURI at the 2024 Canada Cyber Investigation Summit hosted by High Technology Crime Investigation Association from October 1-3, 2024, at the Palais des congrès de Gatineau.
Our Vice President of Business Development, Jason Roslewicz, will be available to discuss how SUMURI’s forensic solutions can enhance your investigative capabilities at Booth 12.
This summit will focus on practical information, including case simulations, to help investigators succeed and grow in their careers.
Don’t miss this chance to connect! For more information, email us at hello@sumuri.com.

OpenText-SUMURI Lunch and Learn
2024-09-24 10:00 - 14:00 (America/New_York) | SUMURI LLC, 40 South Main Street, Magnolia, DE, United States
In the fast-paced world of digital forensic investigations, pointing your investigation in the right direction from the outset is crucial. Effective triage can significantly accelerate your investigative process, and having the right tools at your fingertips is essential for a successful start.
Join our Lunch & Learn session to discover how EnCase Forensic empowers you to use your time wisely by previewing images during the collection process, ensuring you get started on the right foot and save valuable time. Additionally, you will experience the power of EnCase’s latest capabilities and performance enhancements, which streamline evidence processing and enhance efficiency in previewing, collecting, and analyzing digital evidence.
We will also address the increasing diversity, size, and sophistication of digital media that complicates evidence collection. Investigators need to quickly image suspect devices, improve their efficiency, and ensure forensic integrity. Learn about the new capabilities Tableau Forensic delivers, providing cost-effective, reliable, portable standalone forensic imaging of physical media for digital forensic investigations.
You’ll also have the opportunity to explore how TALINO Forensic Bridges adapt to fieldwork, allowing forensic experts to perform critical imaging and analysis of digital evidence on-site with the flexibility to operate outside traditional office settings.
This demonstration will showcase the advanced features of EnCase Forensic, Tableau Forensic, and TALINO Forensic Bridges, illustrating how these tools can optimize your investigation workflow and help you achieve faster, more efficient results.

Tools You’ll Discover:

EnCase Forensic

Streamline evidence processing and enhance efficiency. Experience how EnCase helps you save valuable time by previewing images during the collection process and optimizing the analysis of digital evidence.

Tableau Forensic

Explore the latest capabilities in standalone forensic imaging. Discover cost-effective and reliable solutions for quickly imaging suspect devices while maintaining strict forensic integrity in the field or the lab.

TALINO Forensic Workstations

A look at the hardware backbone of modern forensics. Learn how TALINO workstations are designed by examiners to eliminate processing bottlenecks and provide the GPU and CPU power necessary for local AI implementation.

RECON ITR

See what’s new with RECON ITR. We will demonstrate how to triage and image Apple Silicon Macs natively, capturing extended metadata that other tools often miss.

Meet the Experts:

Speaker 1

Victor De La Peña

Senior Solutions Consultant, OpenText

Speaker 2

Jason Roslewicz

VP Business Development, SUMURI LLC

We look forward to sharing practical insights and technical demonstrations to help you refine your investigative workflow.

Registration Deadline: April 3, 2026. For inquiries, email us at hello@sumuri.com.

See you on April 8th!

MFSC-201: Fairfax, VA
2024-09-16 - 2024-09-20 | Fairfax, Virginia
SOLD OUT
Advanced Practices in Mac Forensics will be presented by SUMURI on September 16 – September 20, 2024, in Fairfax, Virginia for the Department of Homeland Security.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

This course is open to hosting agency personnel only.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

Techno Security & Digital Forensics Conference 2024 - West
2024-09-16 - 2024-09-18 | Pasadena Convention Center, 300 E Green St, Pasadena CA 91101, USA
SUMURI, an award-winning leader in digital forensics, is excited to be a Bronze Sponsor at the Techno Security & Digital Forensics Conference 2024 – West in Pasadena, California, from September 16th to 18th. Visit us at Booth #118.

Join us to explore our cutting-edge solutions firsthand and discover how SUMURI’s products can significantly enhance your investigative capabilities. Don’t miss this opportunity to connect with our experts and learn more about the latest advancements in digital forensics.

September 17th from 11:00 AM to 12:00 PM, "Mastering Live Volatile Data Collection on Mac" by Steve Whalen at Ballroom B

This workshop invites you to bring your own Mac for an immersive, practical experience.
We’ll dive into the specifics of macOS, exploring how to manually collect key forensic data like active network connections, running processes, and user session information, using the unique features and utilities inherent to macOS. This session is designed to equip you with the skills to navigate and investigate the complexities of macOS in live forensic scenarios. As the workshop unfolds, you’ll understand why Macs, with their distinct operating system and security features, are increasingly significant in digital investigations.

"Mastering Live Volatile Data Collection on Mac" by Steve Whalen at Ballroom B

This workshop invites you to bring your own Mac for an immersive, practical experience.
We’ll dive into the specifics of macOS, exploring how to manually collect key forensic data like active network connections, running processes, and user session information, using the unique features and utilities inherent to macOS. This session is designed to equip you with the skills to navigate and investigate the complexities of macOS in live forensic scenarios. As the workshop unfolds, you’ll understand why Macs, with their distinct operating system and security features, are increasingly significant in digital investigations.

Techno Security & Digital Forensics Conference has been the most important gathering of private sector and government attendees dedicated to the digital forensics and computer security industries. Techno is more than a conference, it’s where the community comes together to learn, network, and share.

Don’t miss this opportunity! See you there!

Meet the Experts:

Steve Whalen

Co-Founder, SUMURI LLC

Dan Erickson

TALINO Sales and Support Manager, SUMURI LLC

MFSC-101: Fairfax, VA
2024-09-09 - 2024-09-13 | Fairfax, Virginia
SOLD OUT
Best Practices in Mac Forensics will be presented by SUMURI on September 9 – September 13, 2024, in Fairfax, Virginia for the Department of Homeland Security.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open to hosting agency personnel only.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

40th Annual HTCIA Global Training Event
2024-07-24 - 2024-07-25 | Planet Hollywood, Las Vegas, Nevada, 3667 Las Vegas Boulevard South, Las Vegas, NV, 89109, United States
SUMURI, an award-winning digital forensics company will participate the 40th Annual HTCIA Global Training Event in Las Vegas, Nevada from July 24th to 25th at Booth Number 5.
Meet our Co-Founder, Steve Whalen, and Senior Forensic Specialist, Chris Grettenberger to discuss our solutions firsthand, and learn how our products can enhance your investigative capabilities.

July 24: "Mastering Live Volatile Data Collection on Macs" by Steve Whalen at Sunset 6

This workshop invites you to bring your own Mac for an immersive, practical experience. We’ll dive into the specifics of macOS, exploring how to manually collect key forensic data like active network connections, running processes, and user session information, using the unique features and utilities inherent to macOS. This session is designed to equip you with the skills to navigate and investigate the complexities of macOS in live forensic scenarios. As the workshop unfolds, you’ll understand why Macs, with their distinct operating system and security features, are increasingly significant in digital investigations. The workshop goes beyond technical skill-building; it’s an opportunity to grasp the practical implications of forensic techniques on Macs. By joining us, you’ll gain deeper insight into macOS forensics, enhance your professional capabilities, and network with fellow experts, all while gaining practical skills that are directly transferable to your role in computer forensics.

Part 1 at 2:15pm-3:15pm (Sunset 6)

Part 2 at 3:45pm-4:45pm (Sunset 6)

July 25: "Unlocking Digital Forensics with PALADIN - a Hands-On Workshop by Steve Whalen at Sunset 3

Dive into the world of digital forensics with our interactive workshop at the HTCIA International Conference, featuring the powerful tool PALADIN. PALADIN is a versatile and user-friendly forensic suite built on a Ubuntu Linux foundation, renowned for its ability to simplify complex forensic tasks. This workshop is your gateway to mastering both basic and advanced features of PALADIN, including its intuitive graphical user interface, robust imaging capabilities, and the comprehensive PALADIN Toolbox. Our session will guide you through the essentials of using PALADIN for forensic imaging, data triage, and advanced analysis. You’ll learn to navigate its features, from creating forensic copies of data to leveraging the Toolbox for deeper investigations. We’ll explore how PALADIN streamlines the process of acquiring and analyzing digital evidence, making it an invaluable asset for forensic professionals. As a bonus, the first 50 attendees will receive their own PALADIN USB drive to keep, pre-loaded with the latest version of the tool, allowing you to immediately implement your new skills in real-world scenarios. Whether you’re new to PALADIN or looking to deepen your existing knowledge, this workshop offers a hands-on experience to enhance your forensic capabilities. Join us to unlock the full potential of PALADIN in your forensic investigations.

Part 1 at 12:30pm-1:30pm (Sunset 3)

Part 2 at 2:00pm-3:00pm (Sunset 3)

HTCIA 2024 conference includes topics related to Cloud forensics, Cryptocurrency investigations, qualifications of the digital forensic examiner as a witness, forensic analysis of data in an SQLite database, PowerShell of Incident Response, OSINT techniques, IOS Forensics and many more technology investigation topics.
Don’t miss this opportunity! See you there!
Need more information? Please email us at hello@sumuri.com

MFSC-201: Online, Europe
2024-07-08 - 2024-07-12
Advanced Practices in Mac Forensics will be presented by SUMURI from July 8 – 12, 2024, 8:00 AM to 5:00 PM CEST.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics (MFSC-101) course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. Completion of MFSC-101 (or comparable Mac Forensics course) is strongly recommended before taking MFSC-201. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open for registration and will be taught in the Central European Summer Time Zone.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC-101: Online, Europe
2024-06-24 - 2024-06-28
Best Practices in Mac Forensics will be presented by SUMURI from June 24 – 28, 2024, 8:00 AM to 5:00 PM CEST.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open for registration and will be taught in the Central European Summer Time Zone.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

Forensic Europe Expo
2024-06-19 - 2024-06-20 | ExCeL London, Royal Victoria Dock, 1 Western Gateway, Royal Docks, London E16 1XL, UK, London, England, E16 1XL, United Kingdom
SUMURI, an award-winning digital forensics company, will be joining Insig2 at Excel London from June 19 – 20, 2024, booth FEE630.
Increasing globalization has facilitated a more complex form of crime that does not respect national borders. SUMURI will, once again, bring its award-winning lineup of Software and Hardware solutions to Europe to assist in the fight.
Free Product Consultation will be given by our Senior Forensic Specialist, Chris Grettenberger. If you want to know more about the conference, please visit this link: https://forensicseuropeexpo.com

National Law Enforcement Training on Child Exploitation
2024-06-11 - 2024-06-13 | Hilton Atlanta, 255 Courtland St NE, Atlanta, GA 30303, Atlanta, GA, United States
Join SUMURI, the renowned award-winning digital forensics company, at Booth 102 as we proudly participate in the prestigious 2024 National Law Enforcement on Child Exploitation, taking place at the Hilton in Atlanta, Georgia, from June 11 to 13, 2024.
The National Law Enforcement Training on Child Exploitation is a national training event designed to expand the efforts and knowledge base of law enforcement investigators and prosecutors by providing specialized training focused on investigating and prosecuting technology-facilitated crimes against children.
As part of SUMURI’s commitment to empowering organizations with cutting-edge solutions, we are delighted to offer a Free Product and Mac Forensics Training Consultation.
Meet our TALINO Sales and Support Manager, Dan Erickson, and Software Support Specialist, Justin Henschen, to discuss how our products can enhance your digital forensics capabilities.

Techno Security and Digital Forensics Conference – East
2024-06-03 - 2024-06-06 | Wilmington Convention Center, 10 Convention Center Dr, Wilmington, NC 28401, USA, Wilmington, NC, United States
SUMURI, an acclaimed leader in digital forensics, is proud to announce its platinum sponsorship at the Techno Security & Digital Forensics Conference in Wilmington, North Carolina, from June 3rd to 6th, 2024.
Explore our newest innovation, the KA-Desktop, a compact yet powerful addition to our renowned TALINO Workstation lineup. Visit us at Booth 100 to meet our team and gain insights into how our cutting-edge technology can enhance your investigative endeavors.
Join us at the event to discover how SUMURI continues to revolutionize the digital forensics landscape.

MFSC-201: Orlando, Florida
2024-04-29 - 2024-05-03 | Caribe Royale Hotel, 8101 World Center Drive, Orlando , FL
SOLD OUT
Advanced Practices in Mac Forensics will be conducted by SUMURI at the IACIS Training Event on April 29 – May 3, 2024
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics course. MFSC-201 focuses on in-depth analysis techniques, which provides the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Event, and Scripting and Automation. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!
MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

International Association for Computer Investigative Specialists (IACIS) Conference
2024-04-25 - 2024-04-29 | Caribe Royale Hotel, 8101 World Center Drive, Orlando , FL
SUMURI is a long-time partner and supporter of the International Association of Computer Investigative Specialists. In support of IACIS’ mission to provide quality digital forensics and Incident Response training at an affordable cost, SUMURI will again be presenting Best Practices in Mac Forensics (MFSC-101) and Advanced Practices in Mac Forensics (MFSC-201) at the 2024 IACIS Orlando Training Event at Caribe Royale Orlando.
SUMURI will be showcasing our groundbreaking forensics workstation – TALINO and Mac Forensic Course. Stop by the SUMURI booth on April 25, 26, and 29, 2024, and see the latest and greatest in the DFIR world.

National Cyber Crime Conference
2024-04-23 - 2024-04-25 | Four Points by Sheraton Norwood, 1125 Boston-Providence Turnpike, Norwood, MA
2024 marks the 13th Anniversary of the National Cyber Crime Conference. Join SUMURI from April 23 to April 25, 2024 for one of the premier training events for law enforcement investigators, prosecutors, and forensic examiners worldwide. The 2024 National Cyber Crime Conference offers hundreds of sessions covering diverse digital evidence and cybercrime topics, presented by top experts in the field.
Don’t miss the chance to gain insights from Jason Roslewicz, SUMURI’s VP for Business Development, as he shares his expertise.
These three days offer invaluable opportunities for learning, networking, and advancing in the fields of cybercrime investigation and digital forensics.

Speaking Engagement:
Optimize Your Mobile Investigations by Minimizing Filter Driver Conflicts
Jason Roslewicz, VP for Business Development

MFSC-101: Orlando, Florida
2024-04-22 - 2024-04-26 | Caribe Royale Hotel, 8101 World Center Drive, Orlando, FL, United States
SOLD OUT
Best Practices in Mac Forensics will be presented by SUMURI at the IACIS Training Event on April 22 – April 26, 2024
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!
MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

Wisconsin ICAC Conference On Missing & Exploited Children
2024-04-16 - 2024-04-18 | Hilton Appleton Paper Valley, 333 W College Ave Appleton, WI 54911, Appleton, Wisconsin
Join SUMURI and SecurCube, as we proudly participate in the prestigious 2024 Wisconsin Internet Crimes Against Children Conference, at the Hilton Paper Valley in Appleton, Wisconsin from April 16 to April 18, 2024, at Booth F.

The Wisconsin ICAC Conference on Missing and Exploited Children is designed for all ICAC Task Force members and affiliate agencies, as well as multi-disciplinary team members and other child-serving professionals. The purpose of this conference is to provide nationwide training to expand the efforts, and knowledge base and further enhance skills by providing highly specialized training focused on investigating and prosecuting technology-facilitated crimes against children.

As part of our commitment to empowering organizations with cutting-edge solutions, we are delighted to offer a FREE Product Consultation. Meet our Vice President of Business Development, Jason Roslewicz, and SecurCube’s International Sales Manager, Johanna Levy, to discuss how we can enhance your digital forensics capabilities.

Speaking Engagement:
April 16, 2024, at Rosewood/Linden | 4:00 PM – 5:15 PM
Elevate Your ICAC Investigations with TALINO v2.0: A Decade of Forensic Excellence
Jason Roslewicz – SUMURI | VP of Business Development

April 17, 2024, at Rosewood/Linden | 9:30 AM – 10:30 AM
Strengthening Forensic Analysis: Mastering the Correlation of Multiple Sources for Impactful Reporting and the Quest for Truth
Johanna Levy – SecurCube | International Sales Manager

MFSC-201: Fairfax, VA
2024-04-15 - 2024-04-19 | Fairfax, Virginia
SOLD OUT
Advanced Practices in Mac Forensics will be presented by SUMURI on April 15 – April 19, 2024, in Fairfax, Virginia for the Department of Homeland Security.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

This course is open to hosting agency personnel only.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC-101: Fairfax, VA
2024-04-08 - 2024-04-12 | Fairfax, Virginia
SOLD OUT
Best Practices in Mac Forensics will be presented by SUMURI on April 8, 2024 – April 12, 2024, in Fairfax, Virginia for the Department of Homeland Security.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open to hosting agency personnel only.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC-201: Online, US Eastern Daylight Time
2024-03-18 - 2024-03-22
Advanced Practices in Mac Forensics will be presented by SUMURI from March 18 – 22, 2024, 8:00 AM to 5:00 PM EDT.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics (MFSC-101) course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. Completion of MFSC-101 (or comparable Mac Forensics course) is strongly recommended before taking MFSC-201. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open for registration and will be taught in the US Eastern Daylight Time Zone.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC-201: Hong Kong
2024-03-04 - 2024-03-08 | Hongkong
SOLD OUT
Advanced Practices in Mac Forensics will be presented by SUMURI on March 4 – March 8, 2024.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!

MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
Enrollment for this course is closed.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC-101: Hong Kong
2024-02-26 - 2024-03-01 | Hongkong
SOLD OUT
Best Practices in Mac Forensics will be presented by SUMURI on February 26 – March 1, 2024.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
Enrollment for this course is closed.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC 101 - Tampere, Finland
2024-01-15 - 2024-01-19 | Police University College of Finland Vaajakatu 2, 33720 Tampere, Finland
SOLD OUT
Best Practices in Mac Forensics will be presented by SUMURI on January 15 – January 19, 2024.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

This course is open to Finnish Police only.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC 101 - Online
2023-12-11 08:00 - 2023-12-15 17:00
Best Practices in Mac Forensics will be presented by SUMURI from December 11 to 15, 2023.
SUMURI’s Macintosh Forensic Survival Course (MFSC-101) provides vendor-neutral training that covers the process of examining a Macintosh computer from the first step to the last step in logical order.
MFSC-101 is designed for both the beginner Mac examiner as well as the advanced. The knowledge you gain can be applied to any forensic tool on any platform. No sales pitch, just Mac forensics!

MFSC-101 is the first of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/
This course is open for registration and will be taught in the US Eastern Time Zone.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

MFSC 201 - Online
2023-11-13 - 2023-11-17
SOLD OUT
Advanced Practices in Mac Forensics will be presented by SUMURI on November 13 – 17, 2023.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics course. MFSC-201 focuses on in-depth analysis techniques, which provides the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Event and Scripting and Automation. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!
MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

This course is open to hosting agency personnel only.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.

Data Experts Singapore
2023-10-30 - 2023-11-03 | Singapore
SOLD OUT
Advanced Practices in Mac Forensics will be presented by SUMURI on October 30 – November 3, 2023, in Singapore.
Advanced Practices in Mac Forensics (MFSC-201) builds upon the Best Practices in Mac Forensics course. MFSC-201 focuses on in-depth analysis techniques, which provide the students the ability to apply what they have learned in real-world cases.
MFSC-201 covers topics such as Time Machine Analysis, iCloud Forensics, Application Deconstruction, File System Events, and Scripting and Automation. The knowledge you gain from our training can be applied to any forensic tool on any platform.
SUMURI’s Mac Forensic Survival Courses (MFSC) provide vendor-neutral training that covers the process of examining a Mac computer from the first step to the last step, in logical order. No sales pitch, just Mac Forensics!
MFSC-201 is the second of the two prerequisite courses required for the Certified Forensic Mac Examiner (CFME). Learn more about our training courses and how to become a CFME: https://sumuri.com/mac-training/

This course is open to hosting agency personnel only.

Note:

Students will need access to a Mac computer running the current version of macOS for the course.
