Advanced Training Course
This course is designed for forensic professionals with significant experience in forensics and a solid understanding of Mac forensics. Students will study the AppleTV and Time Capsule, track down passwords, work with FileVault images, and go hands on with the xServe and xServe RAID hardware. In addition, the course will cover advanced analysis techniques and provide students with a working knowledge of the BlackBag Mac Forensic Suite.
Duration
5 days.
Objectives
Upon completion of this course, you will be able to:
- Identify current Mac hardware and understand relevant forensic concepts as they relate to Mac OS X
- Recognize the fundamentals skills learned in earlier BlackBag courses
- Understand how to look for and use passwords on a source system
- See the importance of Mac accessories as they relate to forensics
- Work with an Xserve to ensure proper handling
- Analyze multiple images with true-to-life case data
- Explore BlackBag and third party forensic tools
- Explain how and when these forensic tools work most efficiently
Audience
This course is intended for law enforcement and corporate forensic professionals with a significant understanding of computer forensics. This class is designed for advanced computer forensic users with existing Mac Forensic experience and knowledge.
Prerequisites
Introduction to Mac Forensics.
Intermediate Study of Mac Forensics.
Additional Notes
The last day of this course is reserved for certification / discussion and usually ends by noon.
Government employees can use GOV400 coupon code to save $400 off the registration price.
Outline
- Technology Update
- Review Fundamentals
- File Vault
- Encryption
- Password Cracking
- Password Recovery
- Networks
- AppleTV / Airport
- xServe
- Practical Application
- Instructor Lead Discussion
- Written and Practical Exam
Course Testimonials
As the third class in this series, Blackbag Technologies has provided the information needed for the job. The instructors and staff are extremely knowledgeable and friendly, always encouraging students to be active participants in a classroom environment. I will continue to use Blackbag Technologies for my Mac Forensics learning environment and I would highly recommend ANY of their classes to anyone wanting to learn and expand their current knowledge of Mac Forensics.
Great class. If an agency is doing forensics on Mac systems and not attending this training, they are only doing half the job.
With the ever growing need to understand Apple devices in criminal forensic cases, the training I have received at BBT has been extremely valuable in processing cases for prosecution. The training has helped me with the knowledge and confidence needed to work OSX cases to the fullest. Thanks Chad Gish
Professional grade! Top notch facility and instructors.
Great instructors. Very knowledgeable and made themselves available to us at all times.
Everyone doing Mac examinations should do specific Mac courses and I would have no hesitation in recommending Blackbag for training on Mac Forensics.
The Blackbag staff really went above and beyond to insure that our training experience was all it could be. We had many "special" requests and everyone at Blackbag exceeded my expectations. Again!
