Free

A Magnet Forensics macOS Lunch & Learn in San Francisco

Event Information

Share this event

Date and Time

Location

Location

Williams-Sonoma, Inc.

3250 Van Ness Avenue

San Francisco, California

View Map

Event description

Description

macOS: Forensic Artifacts and Techniques That are Essential for Mac Investigations

Mac investigations can be challenging for a number of reasons. Learn about the Apple File System (APFS) and the changes made as part of the update from HFS+, while discussing the best techniques for successfully completing macOS investigations. In this session we will also investigate APFS Operating System artifacts and files such as: KnowledgeC.db, FSEvents, Volume Mount Points, Quarantined Files, and bash history, providing context on how these artifacts will help connect the dots in your investigations.

Join us on August 6th for a free Lunch and Learn session in San Francisco at Williams-Sonoma. During this session, Trey Amick, a Forensic Consultant here at Magnet Forensics, will teach you about forensic artifacts and techniques that are essential for Mac Investigations.

Parking Information:

  • Parking garage is located at Ghiradell Square (851 Beach St, San Francisco, CA 94109)
  • 4 hour parking in front of the building for those who arrive early
  • PayByPhone/credit card metered parking around the building with a meter max of 4 hours.
Share with friends

Date and Time

Location

Williams-Sonoma, Inc.

3250 Van Ness Avenue

San Francisco, California

View Map

Save This Event

Event Saved