A Magnet Forensics macOS Lunch and Lab in Melbourne

Event Information

Share this event

Date and Time

Location

Location

Cliftons Melbourne

L1/440 Collins St

Melbourne, 3000

Australia

View Map

Event description

Description

macOS: Forensic Artifacts and Techniques that are Essential for Mac Investigations

Mac investigations can be challenging for a number of reasons. Learn about the Apple File System (APFS) and the changes made as part of the update from HFS+, while discussing the best techniques for successfully completing macOS investigations. In this session we will also investigate APFS Operating System artifacts and files such as: KnowledgeC.db, FSEvents, Volume Mount Points, Quarantined Files, and bash history, providing context on how these artifacts will help connect the dots in your investigations.

Join Fulcrum Management and Magnet Forensics on Tuesday, 10th December as they co-host a free, half-day lunch & lab training session on macOS forensics.

Each attendee must register individually. Register now to reserve your chance to network with our experts and your counterparts from around the region!

Agenda

10:00AM – 10:30AM: Registration

10:30AM – 11:00AM: Digital Evidence Management

11:00AM – 12:00PM: Forensic Artifacts and Techniques that are Essential for Mac Investigations

12:00PM - 1:00PM: Lunch

1:00PM – 2:30PM: Hands-on Lab - Cloud Forensics: Get the Evidence You Need to Move Cases Forward

Bring your own computer for a hands-on learning experience and to follow along in real-time!

This event is for both professionals from the Law Enforcement and Corporate sector.

Date and Time

Location

Cliftons Melbourne

L1/440 Collins St

Melbourne, 3000

Australia

View Map

Save This Event

Event Saved