Hey guys, just have a quick question. I just graduated with my bachelors in IT with a minor in computer forensics. However, I am growing increasingly tired of the Windows OS and all that comes with it and loving my Apple devices more and more everyday. My question is, if I decided to devote my training in MAC forensics alone, are there jobs for strictly specializing in MAC OS, iOS (iphone/ipad,itouch) forensics?
The labs that I am aware of often have a person who has had extra training in Apple devices. That person will then deal with Apple devices in addition to the normal work with Windows devices.I have not come across a lab where a person only deals with Apple devices.
I am fairly new to the profession, but I find it hard to believe you could obtain a job with no Windows forensic education at all. As ludlowboy said, you could specialize, but I doubt you could devote yourself solely to Apples systems. Windows is just too common and Apple too rare.
I would agree with both twjolson and ludlowboy.
We have Macs in here, and we generally have a "fanboy" who knows more than most on macs, but I don't think you would find any apple only jobs. Windows is so prevalent its a given and all the EnCase and the likes training is based on Windows images.
I was lucky enough to go on the very first EnCase Mac/Linux specific course in sunny Slough, so there is definitely a niche in it and it would help your chances with jobs having it on your CV, but I would advise against specialising and devoting just your time to it )
Good luck!
We process lots of iPads and iPhones. That said, 99% of everything is Windows and Blackberry. Having the knowledge helps, but it's more of an 'added bonus' than something you can make a career out of.
It is good to get specialized in mac devices if your priority is to work in a repair shop connected to apple. In forensics you will need to have a good knowledge of everything, including Linux and Windows. You can get an bit stream image of the HFSplus file system with DD or FTK, and you can try the hfsplus file system forensic analysis with The sleuth kit, or Encase…. SO WHAT IS THE POINT OF WORKING ONLY WITH MAC DEVICES?, or did you mean getting specialized in data structures of hfsplus file system?
The rise in popularity of the iPhone and iPad will undoubtedly improve the prospects of getting a job if you have specialist knowledge in this field.
However, unless you want to do something like work in an Apple shop, as lucpel suggests, I think you are going to need a wider knowledge of Operating Systems if you want to be considered for jobs in computer forensics at the current time.
And in next weeks Dexter, Dexter decides only to investigate cases with Type O blood.