Cellebrite Advanced Apple Forensics (CAAF) is a five (5)-day, course designed with hands-on learning and real case scenario data. Participants will learn how to perform both triage and analysis of specific data points that exist within operating system and file system artifacts. An CAAF instructor will review the most important macOS and iOS digital artifacts common to most investigations. The advanced instruction includes a comprehensive exploration of macOS and iOS systems, HFS+ and APFS file systems, encryption, and application data.
Download course information here: Cellebrite Advanced Apple Forensics
Upon concluding this course, students will have reviewed up to three different case scenarios covering analysis methodologies with the instructor. The class culminate with a comprehensive written and practical assessment of knowledge gained. With a working, hands-on approach, using relevant, contemporary data covering current issues and solutions, students will gain a strong understanding of macOS and iOS artifacts and the confidence with which to conduct accurate and comprehensive examinations.