Trainings

MacOS Forensics course will provide participants with a general knowledge identifying, collecting and analyzing the artifacts and evidence on Mac OS systems. The participants will learn Mac OS introduction, operating system and services, HFS+/HFS, APFS file system basics, file system acquisition, shell, networking, user accounts, user login history, recovering deleted files, collecting volatile data, forensic usage of the command line, and locating evidence.