Essential Forensic Techniques I

Date: Aug 5, 2019
Location: Tokyo, Japan
Instructor: TBD
Course Status: Confirmed
Alternative Dates


True to its name, Essential Forensic Techniques I is composed of the essential techniques that every forensic professional needs. Specially crafted by our expert instructors, this course has something for every level of forensic experience.

Course Description

EFT I is the perfect way to quickly and effectively learn how to navigate the most important macOS and iOS device areas. For years, BlackBag has remained a highly reliable, go-to resource when detectives and investigators need advice regarding what to do with seized digital devices, in terms of both acquiring and analyzing evidence. The BlackBag team consistently remains abreast of the latest developments and techniques in digital forensics, and their research and experience with real-world cases act as the framework for the training courses. As a result, the example scenarios discussed in the classroom are driven by relevant data and realistic challenges. In short, BlackBag’s instructors will use their wealth of knowledge and firsthand experience with forensic examinations to help students learn all the tips and tricks needed to successfully complete their work.

Through hands-on learning and real case scenario data, the student will learn how to perform both triage and analysis of specific data types that exist within operating system and file system artifacts. This class will guide the student through the most important macOS and iOS device areas. The macOS and iOS operating systems, along with key application data, are explored throughout class while reviewing realistic case data.


Course Length: 5 days
Course Credit: 36 hours

Course Objectives

At the conclusion of this course, the student will have reviewed three different case scenarios. The class will cover analysis methodologies via instructor-led exercises and culminate with an individual written and practical assessment of knowledge gained. Through a hands-on approach, the student will gain a strong familiarity of macOS and iOS artifacts and the confidence with which to conduct thorough examinations. Essential Forensic Techniques I and II both provide for assessment and validation of the student’s comprehension of the material.


While all are welcome, strong computer skills and an understanding of basic forensic concepts (imaging, live data acquisition, and evidence handling) are highly recommended for the optimal experience in this course.


$3,300 USD Government / Private Sector