Cellebrite Apple Forensic Fundamentals (CAFF) is a four (4)-day, course designed with hands-on learning and real case scenario data using Cellebrite Digital Collector and Inspector software. Participants will learn how to perform both triage and analysis of specific data points that exist within operating system and file system artifacts. A CAFF instructor will guide attendees through the most important macOS and iOS digital artifacts. Participants will analyze mounted volume evidence, device connection evidence, and network connections in macOS. The macOS and iOS operating systems, HFS+ and APFS file systems and significant application data are explored throughout the class.

Click Here for more information