Home Specialist skills Security FOR518: Mac and iOS Forensic Analysis and Incident Response

FOR518: Mac and iOS Forensic Analysis and Incident Response

Learn how to parse the HFS+ file system by hand, using only a cheat sheet and a hex editor

Understand the APFS file system and its significance

Identify remote or local data backups, disk images, or other attached devices

Find encrypted containers and FileVault volumes, understand keychain data and crack Mac passwords

Analyse and understand Mac metadata and their importance in the spotlight database, time machine and extended attributes

Overview

Off the shelf (OTS)

FOR518 is the first non-vendor-based Mac and iOS incident response and forensics course that focuses students on the raw data, in-depth detailed analysis and how to get the most out of their Mac and iOS cases.

The intense hands-on forensic analysis and incident response skills taught in the course will enable analysts to broaden their capabilities and gain the confidence and knowledge to comfortably analyse any Mac or iOS device.