cxlBlackBag Windows Forensic Investigations (WFI) ILT

Date: 07 - 10 Jul 2020 Days: Tue-Fri Hours: 9:00 AM - 5:00 PM
Course type: Instructor Led
Region: North America
Location: San Jose, CA, United States
Capacity:Open
Enroll by: 07 Jul 2020

About this course

Description

Through hands-on learning and case-based scenarios depicting real-life issues, students will learn advanced techniques for performing detailed, in-depth analysis of operating and file system data artifacts on macOS and iOS devices. Taught by experts in the field, this course will take students through integral macOS and iOS device areas at a low level. A comprehensive look at macOS and iOS operating systems, HFS+ and APFS file systems, accounts, encryption and application data are covered with an interactive, hands-on learning method.

Upon concluding this course, students will have reviewed up to three different case scenarios covering analysis methodologies with the instructor. The class culminate with a comprehensive written and practical assessment of knowledge gained. With a working, hands-on approach, using relevant, contemporary data covering current issues and solutions, students will gain a strong understanding of macOS and iOS artifacts and the confidence with which to conduct accurate and comprehensive examinations.





Learning objectives

Upon concluding this course, students will have reviewed up to three different case scenarios covering various file system, operating system and application artifacts relevant to real-life cases. Analysis methodologies are covered via hands-on work with actual data and instructor-led exercises. Knowledge is validated with an individual written and practical assessment. Through an interactive, hands-on approach, students will gain a strong familiarity of macOS and iOS artifacts and the confidence with which to conduct thorough examinations.