Last Day to Save $400 on 4-6 Day Courses at SANS Cyber Defense Initiative 2017!

Press


SANS Institute Introduces All Apple, Mac and iDevice, Forensic Analysis Course

Helps Digital Forensic Investigators Handle the Increasing Popularity of Apple Devices with Confidence

  • Bethesda, MD
  • Aug. 26, 2014

To help digital forensic and incident response (DFIR) professionals take on any Apple case without hesitation, the SANS Institute today introduced the new FOR518: Mac Forensic Analysis course. This intense hands-on forensic analysis course will help Windows-based investigators broaden their analysis capabilities and achieve the confidence and knowledge needed to comfortably analyze any Mac or iOS system without hesitation.

SANS will debut the new FOR518: Mac Forensic Analysis course at SANS Crystal City in Virginia, September 8 - 13. A second run course will be offered at SANS Seattle 2014, September 29 - October 6.

"From coffee shops to corporate boardrooms, Apple devices can be found nearly everywhere. As these devices continue to grow in popularity, digital forensic investigators and analysts must start paying more attention to them," said Sarah Edwards, SANS Course Author and Digital Forensic Analyst. "The goal of the FOR518: Mac Forensic Analysis course is to help form well-rounded investigators by introducing Mac forensics into a Windows-based forensics world to ensure accurate and helpful data can be recovered, regardless of device."

Attendees of the FOR518: Mac Forensic Analysis Course will learn:

  • Mac Fundamentals: How to analyze and parse the Hierarchical File System (HFS+) file system by hand and recognize the specific domains of the logical file system and Mac-specific file types.
  • User Activity: How to understand and profile users through their data files and preference configurations.
  • Advanced Analysis and Correlation: How to determine how a system has been used or compromised by using the system and user data files in correlation with system log files.
  • Mac Technologies: How to understand and analyze many Mac-specific technologies, including Time Machine, Spotlight, iCloud, Versions, FileVault, AirDrop, and FaceTime.

For more information about SANS FOR518: Mac Forensic Analysis, or to register for an upcoming course, please visit: http://www.sans.org/info/166337

SANS Media Contact

About SANS Institute

The SANS Institute was established in 1989 as a cooperative research and education organization. SANS is the most trusted and, by far, the largest provider of cyber security training and certification to professionals at governments and commercial institutions world-wide. Renowned SANS instructors teach over 50 different courses at more than 200 live cyber security training events as well as online. GIAC, an affiliate of the SANS Institute, validates employee qualifications via 30 hands-on, technical certifications in information security. The SANS Technology Institute, a regionally accredited independent subsidiary, offers master's degrees in cyber security. SANS offers a myriad of free resources to the InfoSec community including consensus projects, research reports, and newsletters; it also operates the Internet's early warning system--the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to help the entire information security community. (https://www.sans.org)