Advanced Apple® Forensic Investigations

This course was previously named Essential Forensic Techniques II.


As the second part of our Essential Forensic Techniques series, this course is targeted toward students who have completed Apple® Forensic Investigations; however, advanced examiners may contact our Training Department if you have not taken Apple® Forensic Investigations but believe you would be comfortable in an Advanced Apple® Forensic Investigations course. We will provide you with a short placement exam to determine which course would best accommodate your knowledge, skills, and abilities.

Course Description

Through hands-on learning and case-based scenarios depicting real-life issues, students will learn advanced techniques for performing detailed, in-depth analysis of operating and file system data artifacts on macOS and iOS devices. Taught by experts in the field, this course will take students through integral macOS and iOS device areas at a low level. A comprehensive look at macOS and iOS operating systems, HFS+ and APFS file systems, accounts, encryption and application data are covered with an interactive, hands-on learning method.

To learn more, view the course syllabus here.


Course Length: 5 days
Course Credit: 36 hours - includes course assessment (32 hours of curriculum)

Course Objectives

Upon concluding this course, students will have reviewed up to three different case scenarios covering analysis methodologies with the instructor. The class culminate with a comprehensive written and practical assessment of knowledge gained. With a working, hands-on approach, using relevant, contemporary data covering current issues and solutions, students will gain a strong understanding of macOS and iOS artifacts and the confidence with which to conduct accurate and comprehensive examinations.


Attendees should have above-average computer skills, should have attended Apple® Forensic Investigations or other validated Mac Training course(s) and be comfortable working in macOS, HFS+ and APFS at more than a casual user level. This course is for advanced examiners who desire a deep dive into the challenges presented by Apple devices, specifically APFS, encryption, CoreStorage, Fusion, RAIDS, Time Machine, etc. Those who do not already possess the necessary knowledge base and familiarity with Mac and iOS devices may struggle to successfully complete this class.


$3,300 USD Government / Private Sector

Set Descending Direction

8 Item(s)

  1. Training Bundle

  2. AF II - Advanced Apple Forensic Investigations - September 30-October 4, 2019 - Rigaud, Quebec

    Advanced Apple Forensic Investigations

    Rigaud, Quebec - Sep 30, 2019

    LE only

  3. AF II - Advanced Apple Forensic Investigations - October 21-25, 2019 - Singapore

    Advanced Apple Forensic Investigations

    Singapore - Oct 21, 2019

  4. AF II - Advanced Apple Forensic Investigations - November 11-15, 2019 - Brighton, UK

    Advanced Apple Forensic Investigations

    Brighton, UK - Nov 11, 2019

  5. AF II - Advanced Apple Forensic Investigations - November 18-22, 2019 - Tokyo, Japan

    Advanced Apple Forensic Investigations

    Tokyo, Japan - Nov 18, 2019

  6. AF II - Advanced Apple Forensic Investigations - December 9-13, 2019 - Netherlands

    Advanced Apple Forensic Investigations

    Veenendaal, Netherlands - Dec 9, 2019

    LE only

  7. AF II - Advanced Apple Forensic Investigations - January 27-31, 2020 - Ashburn, VA

    Advanced Apple Forensic Investigations

    Ashburn, VA - Jan 27, 2020

  8. AF II - Advanced Apple Forensic Investigations - March 9-13, 2020 - San Jose, CA

    Advanced Apple Forensic Investigations

    San Jose, CA - Mar 9, 2020