A Magnet Forensics macOS Lunch and Lab in Wellington
Date and time
Location
KPMG
10 Customhouse Quay Level 9 Wellington, 6011 New ZealandDescription
macOS: Forensic Artifacts and Techniques that are Essential for Mac Investigations
Mac investigations can be challenging for a number of reasons. Learn about the Apple File System (APFS) and the changes made as part of the update from HFS+, while discussing the best techniques for successfully completing macOS investigations. In this session we will also investigate APFS Operating System artifacts and files such as: KnowledgeC.db, FSEvents, Volume Mount Points, Quarantined Files, and bash history, providing context on how these artifacts will help connect the dots in your investigations.
Join Streamlined Litigation Support, GrayShift and Magnet Forensics on Monday, 19 August as they co-host a free, half-day lunch & lab training session on Cloud and computer forensics, and other investigative essentials.
Each attendee must register individually. Register now to reserve your chance to network with our experts and your counterparts from around the region!
This event includes a Hands-on Lab for which you'll need to bring your own computer.
Agenda
9:00AM – 9:30AM: Registration + Welcome breakfast
9:30AM – 10:00AM: Digital Evidence Management
10:00AM – 11:00AM: macOS: Forensic Artifacts and Techniques that are Essential for Mac Investigations
11.15AM – 12.45PM: Hands-on Lab: Cloud Forensics
12:45PM – 1.45PM: Lunch
1:45PM – 3:00PM: GrayKey Demo (LE only)