I am taking the step into Mac Forensics. I usually like to start with a good book before moving on to whitepapers, websites, etc.
I only see one book on Amazon Mac OS X, iPod, and iPhone Forensic Analysis DVD Toolkit.
Anyone know of any others? Anyone care to rate the one listed?
Great book worth having as a reference in your library.
The Appleexaminer.com website is a great resource with up to date information.
Some other books to consider are not Forensic specific, but very good for understanding Macs
Mac OS X Internals A Systems Approach by Amit Singh
The Apple (Pro) Training Series books I have the Snow Leopard Support Essentials one which is very helpful. However, The OSX Lion book appears to have been released last month.
When you really get into it, you can also look at the Apple Certifications and look into getting access to the AppleCare Technician training materials ($299) Apple.com
But to start off with one book that is very easy to read and is forensic specific, Mac OS X, iPod, and iPhone Forensic Analysis DVD Toolkit is the one you want.
Regards,
Chris Currier
There are lots of Mac Book available of different types, even you can get lots of them online. You can either get to the amazon or anywhere else for all the purchases. But have you experienced ever to
Thanks nlpd120, for that detailed reply. I shall look into some of those, especially since I am quite inexperienced to Mac OS X.
What about tool-neutral classes for Mac Forensics? I know SANS has one, but that's about it. I'm looking more for personal observations and opinions.
As far as training goes here are some (not in any particular order)
Dr. Marcus Rogers (Purdue University) the Basic one I attended was for law enforcement and it was excellent.
Sumuri Training
MacMarshal
Macforensics Lab
BlackBag Technologies
ASR Data
If nothing else you have some research ahead of you. Check out their websites for more information i.e. manuals, papers, etc…
I wouldn't discourage you from going to a Mac Forensic class put on by a tool manufacture that you use.
I'm sure you will get more input on other classes as well.
Enjoy,
Chris