If you’re looking to dive deep into iOS examinations and the use of the GrayKey device and expand your knowledge of advanced forensics, then be the first to reserve your spot for the latest course from Magnet Forensics & Grayshift: MAGaK (Magnet AXIOM & GrayKey) Advanced iOS Examinations (AX301)!
In this expert-level four-day training course, you will get hands-on use of the GrayKey device and learn how to fully operate it — including how to establish a proper workflow for handing iOS devices in the field to the lab and how to acquire a full file system image of iOS devices.
Students must be part of a law-enforcement agency who has been cleared by Grayshift in order to attend this course.Magnet AXIOM will also be leveraged to learn how the iOS filesystem is structured, how to locate key data, and how artifacts are structured. In addition, students will learn about artifacts specific to the iOS full file system and its multiple levels of data protection. Third-party artifact analysis of several advanced, secure artifacts will be covered, including how the device keychain ties into these artifacts. A methodology will be discussed on how to conduct deep-level iOS examinations and how to understand specific operating system artifacts in context to show device interactions over time. Students will learn how to put someone behind a device physically interacting with it, and even sometimes where that device has been.
Because AX301 is an intermediate-level course, it is strongly recommended that students first complete Magnet AXIOM Examinations (AX200). AX200 will provide a thorough understanding of AXIOM that will help students focus on the cloud aspect of investigations in AX301.
Check out the registration page for more information including a detailed breakdown of each module and objectives for the course.
AX301 is available as part of the Training Annual Pass (TAP). Don’t have a TAP yet? Get one today and take unlimited courses in 12 months for less than the cost of two.
Have any questions? Feel free to email us at [email protected].