Notifications
Clear all

Mac Forensic Traning  

  RSS
Christ143uk
(@christ143uk)
Junior Member

Hi,

Looking to do some Mac forensic training, in the UK, and wondering if anyone has any experience with different providers.

So far I am thinking about one of the following providers

Encase
Blackbag
7safe
Sumari (If in UK)

Thanks

Quote
Posted : 27/06/2016 2:25 pm
RabbitMac
(@rabbitmac)
New Member

I wholeheartedly recommend BlackBag.

Expert Mac training delivered on a Mac by a company that has a real focus on Apple hardware and software.

I've done their free intro course and the CF1 and CF2 and I can honestly say that I've never learnt more from 2 weeks of training.

I've done other vendors Mac training too but that always feels like a bit of a bolt on - and at the end of the day you're seeing the file system parsed on a Windows box.

I've also had really good and super fast support from BlackBag when I've come up against some data that I couldn't make sense of.

ReplyQuote
Posted : 27/06/2016 3:04 pm
Christ143uk
(@christ143uk)
Junior Member

Hi Rabbit,

Thanks for the reply.

Yeah in all honesty that's the provider I was looking at. I thought as they solely focus on Mac/IOS they maybe the best bet.

Also for the fact i'm more likely to use Blacklight rather than Encase to do Mac examinations.

Thanks

ReplyQuote
Posted : 27/06/2016 4:03 pm
evo8368
(@evo8368)
New Member

Totally agree with RabbitMac. Blackbag Training was very good and very hands on which helps with the learning I found.

ReplyQuote
Posted : 27/06/2016 5:24 pm
Deltron
(@deltron)
Active Member

The Sumuri dude is legit he knows his Mac Forensics plus he is entertaining.
He software is also great too.

ReplyQuote
Posted : 27/06/2016 7:52 pm
Christ143uk
(@christ143uk)
Junior Member

Hi,

Thanks for the replies, I will check out the Samuri course in a bit more detail.

In regards to the Blacklight course the only thing that puts me off is I have done Encase 2 and Advanced and I only really want to focus on Mac computers rather than Windows. I can't see a time where I would ever use Blacklight over Encase/FTK/Netclean to conduct Windows based investigation.

I will have to find out how much Windows based content there is and go from there.

Thanks

ReplyQuote
Posted : 28/06/2016 12:07 pm
raydenvm
(@raydenvm)
Junior Member

Here is also the excellent course by Sarah Edwards from SANS.

You can do it online with her help https://www.sans.org/course/mac-forensic-analysis/Type/asc/online#results

ReplyQuote
Posted : 28/06/2016 1:42 pm
Christ143uk
(@christ143uk)
Junior Member

Here is also the excellent course by Sarah Edwards from SANS.

You can do it online with her help https://www.sans.org/course/mac-forensic-analysis/Type/asc/online#results

Hi,

Thanks I did look at this but there weren't any training events being held in the UK from what I could see.

Thanks

ReplyQuote
Posted : 28/06/2016 1:46 pm
Share: