Mac Forensic Tranin...
 
Notifications
Clear all

Mac Forensic Traning

8 Posts
5 Users
0 Likes
1,122 Views
(@christ143uk)
Posts: 51
Trusted Member
Topic starter
 

Hi,

Looking to do some Mac forensic training, in the UK, and wondering if anyone has any experience with different providers.

So far I am thinking about one of the following providers

Encase
Blackbag
7safe
Sumari (If in UK)

Thanks

 
Posted : 27/06/2016 1:25 pm
(@rabbitmac)
Posts: 1
New Member
 

I wholeheartedly recommend BlackBag.

Expert Mac training delivered on a Mac by a company that has a real focus on Apple hardware and software.

I've done their free intro course and the CF1 and CF2 and I can honestly say that I've never learnt more from 2 weeks of training.

I've done other vendors Mac training too but that always feels like a bit of a bolt on - and at the end of the day you're seeing the file system parsed on a Windows box.

I've also had really good and super fast support from BlackBag when I've come up against some data that I couldn't make sense of.

 
Posted : 27/06/2016 2:04 pm
(@christ143uk)
Posts: 51
Trusted Member
Topic starter
 

Hi Rabbit,

Thanks for the reply.

Yeah in all honesty that's the provider I was looking at. I thought as they solely focus on Mac/IOS they maybe the best bet.

Also for the fact i'm more likely to use Blacklight rather than Encase to do Mac examinations.

Thanks

 
Posted : 27/06/2016 3:03 pm
(@evo8368)
Posts: 6
Active Member
 

Totally agree with RabbitMac. Blackbag Training was very good and very hands on which helps with the learning I found.

 
Posted : 27/06/2016 4:24 pm
(@deltron)
Posts: 125
Estimable Member
 

The Sumuri dude is legit he knows his Mac Forensics plus he is entertaining.
He software is also great too.

 
Posted : 27/06/2016 6:52 pm
(@christ143uk)
Posts: 51
Trusted Member
Topic starter
 

Hi,

Thanks for the replies, I will check out the Samuri course in a bit more detail.

In regards to the Blacklight course the only thing that puts me off is I have done Encase 2 and Advanced and I only really want to focus on Mac computers rather than Windows. I can't see a time where I would ever use Blacklight over Encase/FTK/Netclean to conduct Windows based investigation.

I will have to find out how much Windows based content there is and go from there.

Thanks

 
Posted : 28/06/2016 11:07 am
mokosiy
(@mokosiy)
Posts: 54
Trusted Member
 

Here is also the excellent course by Sarah Edwards from SANS.

You can do it online with her help https://www.sans.org/course/mac-forensic-analysis/Type/asc/online#results

 
Posted : 28/06/2016 12:42 pm
(@christ143uk)
Posts: 51
Trusted Member
Topic starter
 

Here is also the excellent course by Sarah Edwards from SANS.

You can do it online with her help https://www.sans.org/course/mac-forensic-analysis/Type/asc/online#results

Hi,

Thanks I did look at this but there weren't any training events being held in the UK from what I could see.

Thanks

 
Posted : 28/06/2016 12:46 pm
Share: