Free

A Magnet Forensics macOS Lunch & Learn in San Jose

Event Information

Share this event

Date and Time

Location

Location

Santa Clara County Crime Lab

250 W. Hedding St.

San Jose, California 95110

View Map

Event description

Description

macOS: Forensic Artifacts and Techniques That are Essential for Mac Investigations

Mac investigations can be challenging for a number of reasons. Learn about the Apple File System (APFS) and the changes made as part of the update from HFS+, while discussing the best techniques for successfully completing macOS investigations. In this session we will also investigate APFS Operating System artifacts and files such as: KnowledgeC.db, FSEvents, Volume Mount Points, Quarantined Files, and bash history, providing context on how these artifacts will help connect the dots in your investigations.

We’ll also provide an overview of new iOS 12 and popular Android features impacting mobile forensics, how to ingest images acquired with Grayshift GrayKey, and how this data compares to data available from iOS device backups. We’ll cover using the iOS Keychain and passwords from a GrayKey extraction to recover data from the Cloud using Magnet AXIOM, and an in-depth exploration of how to use AXIOM to review and analyze results once you’ve acquired the data.

Join us on August 7th for a free Lunch and Learn session in San Jose hosted by Santa Clara County Crime Lab. During this session, Trey Amick, a Forensic Consultant here at Magnet Forensics, will teach you about forensic artifacts and techniques that are essential for Mac Investigations.

This event is reserved for Law Enforcement only. Each attendee must register individually. Register now to reserve your chance to network with our experts and your counterparts from around the region!

Parking Information:

  • Temporary parking permit is needed for Santa Clara County Crime Lab parking structure. Please arrive a little early to get permits from Santa Clara County Crime Lab, then proceed to the nearby parking structure.
  • Very limited street parking (Hedding St. in front of the Lab) for only for LE vehicles (marked/unmarked) with no permit needed
Share with friends

Date and Time

Location

Santa Clara County Crime Lab

250 W. Hedding St.

San Jose, California 95110

View Map

Save This Event

Event Saved