DF420 - Macintosh Examinations with EnCase Forensic Training

Macintosh Examinations with EnCase Forensic Training

Bounga Informatics, as an Authorized Training Partner of Guidance Software in Singapore, provides certified standard digital forensic training, DF420 - Macintosh Examinations with EnCase Forensic Training.

The introduction of the iPod, iPhone, and iPad and the use of Intel-based processors have generated a steep increase in the sales of Macintosh computers, which are no longer restricted to the realm of desktop publishing and computer-aided design.

Computer users are attracted by the design of the Macintosh, its UNIX-like stability, ease-of-use, and its ability to run Microsoft® Windows. Most die-hard Windows users will refuse to return their Mac once they’ve started using it.

This course makes a departure from the world of Microsoft Windows and provides in depth instruction on analysing the various Macintosh operating system artifacts.

The course’s topics will cover:

  • Apple Macintosh history and development, acquisition, and disk layout
  • HFS+ volume structure including in-depth analysis of the Catalog and Extents Overflow files and low-level file recovery
  • Fundamental Mac OS X operations, Mac disk, and disk-image analysis and acquisition
  • Max OS X system, user, application, and Internet artifacts

Who Should Attend:
This course is intended for EnCase Forensic users, working as law enforcement officers, computer forensic examiners, corporate and private investigators, and network security personnel. A basic understanding of the concepts of computer forensics is required. The class curriculum builds upon the foundation of the EnCase Computer Forensics II or DFIR-Building an Investigation courses, continuing with a focus on conducting examinations of the Macintosh operating systems.

Instructors
This training will be delivered by high qualified instructors in Computer Forensics field.

Tuition
USD3,195 or SGD4,500 per seat

Subscribe to Syndicate