DFIR Operator Series: MacOS Forensics
It seemed that MacOS was unhackable for a time… Until it wasn’t. Be sure you have the skills to acquire and analyze forensic data from these systems. This course will give you a fundamental understanding of MacOS-based systems to effectively acquire and analyze data, interpret results, and present them as evidence in a legal setting.
Already have an account? Sign In »
This course is an introduction to the forensic analysis of Mac OS systems. You will learn the basics of digital forensics, including acquiring and analyzing data from Mac systems. Topics covered include:
- Understanding the Mac file system and file system artifacts
- Identifying and analyzing system and user activity with built-in Mac tools
- Utilizing third-party forensic tools for data acquisition and analysis
- Examining and interpreting system and application log files
- Investigating and analyzing user activity such as browser history and chat logs
- Techniques for preserving and presenting forensic evidence in a legal setting
The course will be primarily hands-on and includes practical exercises and case studies to give you experience with the forensic analysis of Mac systems.
Complete this entire course to earn a DFIR Operator Series: MacOS Forensics Certificate of Completion