MAC Forensic training?

Hi,

Not taken either the AD of BB courses, so can't comment on them. From what I have heard elsewhere, the guy who did the Mac courses for FD left and set up his own company, with Mac training available at www.sumuri.com. Again, I've not taken this class so can't vouch for how good it is.

HTH

Ben

Thanks for the tip. I'll check it out.

The third one (or fourth…) I forgot to mention is 7Safe in UK. They also have a MAC "certification", but is it recognized by anyone? Training is one thing - anyone can claim to be a good teacher and trainer, but certification isn't really worth anything unless it is recognized…

-Stigster!

I just got back from a week of Mac Forensic Survival Course level 1 with Sumuri and I am happy to report that this was an excellent course! I learned a lot. The course was not too heavy, not too light and rather perfect for some like me who knows my forensics but hasn't had too much experience with Mac, but I am sure people with more "Mactime" will benefit greatly from this training as well.

The course teaches efficient and forensically sound methods for performing forensics on Mac computers (all kinds, including classic systems and the infamous MacBook Air) and on different Apple devices like the iPhone and iPods.

Ye' ol' cmd-line-lovers like myself will like the fact that most of the methods tought can be performed from a trusty terminal, while those of a more grafical persuasion will like that almost everything can be done from the GUI.

So to all of you who might be looking for a Mac training course - Sumuri is the way to go! I rate this training 5/5.

-Stigster!

Blackbag are looking to bring a course to the UK - I'll try to find out more for you.

Thanks, but after taking the Sumuri course I think I'm good for a while. I might go back for Sumuri's level 2 course next year, but for now I have exhausted my Mac-training-funding. (Which is really sad cause I'd like to complete level 2 as well while I'm at it. P)

Guidance Software are offering an EnCase Max training course.

Currently there is nothing on the site as the course content isn't finished yet, but it should be ready early(ish) next year.

Here is the place holder on the site
https://www.guidancesoftware.com/Training.aspx?menu_id=137&id=3387

Oh and the reason I know this is I was at some training there about a month ago and Bill told me the details, they expecting feb / march ish time to have it complete and ready to be rolled out!

Hi

I have just done the AD course and I found it very good - I certainly learnt a lot and would recommend it.
As I have not done any other, specifically, MAC courses I cannot give you any relative value opinion mind!

May the plist be with you.

Hi there,

7Safe offer a practically based 3 day MAC Forensics course aimed at investigators who are not familiar with Apple computers but have some experience of forensic investigations.

Developed from the perspective that even today many forensics labs do not have Mac systems, it demonstrates that it is possible to carry out an examination of a Mac system using conventional forensic software, tools and utilities on a Windows based system. Delegates use a Windows based system to investigate forensic images of Mac systems. Approximately half a day is spent providing an understanding of the HFS+ with a focus to identify data of use to the investigator. Where appropriate a Mac system is used to demonstrate a users perspective of the data seen. The possible shortfalls of this examination technique are discussed and it is highlighted where the use of a Mac maybe more appropriate. At this time the course does not deal specifically with iPads or iPhones although similar file systems and data structures exist on these devices.

Course highlights – HFS+ file system, System & user configuration, forensic artifacts from OSX pre-installed software, 3 Office suites, E-mail including Entourage, Trash (Recycle Bin), Printing, Log Files, Safari Internet browser and Time Machine (Backup disks)

For more information on this course please visit us at

http//7safe.com/applied_mac_forensics.htm

BlackBag Technologies, Sumuri and AccessData all offer very up-to-date Mac training currently. I have attended each of these and have to compliment all of them for their well put together classes and excellent instructors.

7Safe, I have to compliment you on your choice of Mac Forensics logo. Really looks like my website. Copying is the best form of flattery they say!

Best wishes,
Ryan