Courses & Workshops

Have questions about training?     Contact us

DF420 - Macintosh Examinations with EnCase®

Duration: 4 Days

The introduction of the iPod, iPhone, and iPad and the use of Intel-based processors have generated a steep increase in the sales of Macintosh computers, which are no longer restricted to the realm of desktop publishing and computer-aided design.

Computer users are attracted by the design of the Macintosh, its UNIX-like stability, ease-of-use, and its ability to run Microsoft® Windows. Most die-hard Windows users will refuse to return their Mac once they’ve started using it.

Delivery method: Group-Live. NASBA defined level: advanced

CPE Credits - 32

Audience

This course is intended for EnCase users, working as law enforcement officers, corporate and private investigators, computer forensic examiners, and network security personnel. A basic understanding of the concepts of computer forensics is required. The class curriculum continues with the tuition provided in the DFIR-Building an Investigation course, continuing with a focus on conducting examinations of the Macintosh operating systems.

Prerequisites

DF210 - Building an Investigation with EnCase Forensic or EnCE® Certification. Advance preparation for this course is not required

Summary:

This hands-on course makes a departure from the world of Microsoft Windows and provides in depth instruction on analysing the various Macintosh operating system artifacts. The course’s topics will cover:

  • Acquisition of internal storage in an Apple Macintosh, and disk layout
  • HFS+ volume structure including in-depth analysis of the Catalog and Extents Overflow files and low-level file recovery
  • APFS container and volume structures, including data recovery using APFS checkpoints
  • Fundamental Mac OS X operations, Mac disk, and disk-image analysis and acquisition
  • Max OS X system, user, application, and Internet artifacts

Pricing

Format Currency Price
Per Student at Open Text Site €  2,713.50 
Per Student at Open Text Site GBP  2,378.50 
Per Student at Open Text Site USD  3,350.00 

Taxes: All prices exclude VAT or other taxes where applicable (all currencies).

Extra expenses: Customer site course prices do not include instructor travel expenses, which are billed separately.

Reservations: Please provide a minimum of 3 weeks advance notice when arranging courses at customer sites.

Course & Workshop Calendar

Below is a listing of all the currently available dates and locations for this course and/or workshop from Open Text.

Selection & Registration Process

Before you can register for a course or workshop, you need to select which one you want to attend. To do this, simply click on the "Add to cart" link and it will be added to your shopping cart.

Note: After clicking on the "Add to cart" link, you will be taken to the main course and workshop selection page where all of the courses and workshops you have added to your shopping cart will appear at the top of the page.

Once you have selected all the courses and workshops you want to attend, simply select the "Check-out link and complete the registration form.

Date Course Type Course Name Language Location Price Add
Sep 25, 2018  On-site  DF420 - Macintosh Examina  English  GSI-Washington, DC 3,350.00  Add to Cart 
Sep 25, 2018  On-site  DF420 - Macintosh Examina  English  Virtual Classroom - North America GSI Eastern Time 3,350.00 

FULL

 
Nov 27, 2018  On-site  DF420 - Macintosh Examina  English  GSI-Pasadena 3,350.00  Add to Cart 
Nov 27, 2018  On-site  DF420 - Macintosh Examina  English  Virtual Classroom - North America GSI Pacific Time 3,350.00  Add to Cart 
Dec 11, 2018  On-site  DF420 - Macintosh Examina  English  GSI-Reading 2,378.50  Add to Cart 
Feb 19, 2019  On-site  DF420 - Macintosh Examina  English  GSI-Pasadena 3,350.00  Add to Cart 
Feb 19, 2019  On-site  DF420 - Macintosh Examina  English  Virtual Classroom - North America GSI Pacific Time 3,350.00  Add to Cart 
Feb 26, 2019  On-site  DF420 - Macintosh Examina  English  Virtual Classroom - Europe GSI UK Time 2,378.50  Add to Cart 
Feb 26, 2019  On-site  DF420 - Macintosh Examina  English  GSI-Reading 2,378.50  Add to Cart 
Mar 19, 2019  On-site  DF420 - Macintosh Examina  English  GSI-Washington, DC 3,350.00  Add to Cart 
Apr 30, 2019  On-site  DF420 - Macintosh Examina  English  GSI-Pasadena 3,350.00  Add to Cart 
Apr 30, 2019  On-site  DF420 - Macintosh Examina  English  Virtual Classroom - North America GSI Pacific Time 3,350.00  Add to Cart 
Jun 18, 2019  On-site  DF420 - Macintosh Examina  English  GSI-Reading 2,378.50  Add to Cart 
Jun 25, 2019  On-site  DF420 - Macintosh Examina  English  GSI-Washington, DC 3,350.00  Add to Cart