BEST PRACTICES
IN MACINTOSH FORENSICS
IN MACINTOSH FORENSICS
VENDOR NEUTRAL – TOOL AGNOSTIC – COST EFFECTIVE
Best Practices in Macintosh Forensics (MFSC-101) provides detailed instruction on the process of examining a Macintosh computer from the first step to last step in logical order.
MFSC-101 is the most up to date course on Mac Forensics, focusing on providing the student with in-depth knowledge and hands-on skills, allowing them to conduct an examination using any forensic tool on any platform.
Designed for both
Beginner and Advanced
Mac Examiners
MFSC-101 provides the necessary knowledge to understand the intricacies of the macOS and how critical data is stored. This, along with advanced topics on macOS, provides the student with the tools to find, analyze and understand critical data which can be used in support of their investigations.
FEATURED TOPICS
IN-DEPTH & HANDS-ON TRAINING EXPERIENCE
Apple Silicon & Intel Technology
Mac Security & FileVault
Apple Extended Metadata
Mac Imaging
COMPLETELY EVOLVING - ALWAYS UP TO DATE - NEVER STATIC
ADDITIONAL TOPICS
- Safely Obtaining System Information
- Volatile Data Collection
- Imaging and Acquisition
- Verifying and Safely Mounting Forensic Images
- Search Techniques Using macOS
- Locating Evidence (Apple Native Applications)
- Recovering Deleted Files
- Examining SQLite Databases and PLIST files
- Using macOS for Forensics
learn how
to get certified
Available for FREE to anyone who has completed our MFSC-101 and MFSC-201.
