Course

Course Summary
Credit Type:
Course
ACE ID:
DDCI-0008
Organization's ID:
FT220
Organization:
DC3 Cyber Training Academy
Location:
Classroom-based
Length:
1 week (40 hours)
Dates Offered:
Credit Recommendation & Competencies
Level Credits (SH) Subject
Upper-Division Baccalaureate 5 Computer Forensics, Criminal Justice, Data Communication, Information Systems, or Networking
Description

Objective:

The course objective is to enable students to successfully and accurately examine and analyze Macintosh OS X artifacts and application data using practical scenarios and proper forensic software.

Learning Outcomes:

  • Demonstrate forensic concepts, principles, fundamentals, and processes of disk partitioning, boot camp, data storage, HFS+ and HFSX file systems, OS X operating systems, FileVault2 encryption, OS X property list files, log files and SQLite database file
  • Examine Macintosh operating system data including FileVault2, Keychain data, Time Machine volumes, and other OS X-related data using forensic software
  • Examine OS X application data including e-mail, instant messaging, remote storage artifacts and Web browser data using forensic software
  • Determine OS X account passwords

General Topics:

  • Apple computer technologies
  • Macintosh forensics basics
  • OS X system data analysis
  • Application analysis
  • Safari and Firefox Web browser artifacts
  • Remote storage artifacts: iCloud, Time Machine, and Apple backup files
Instruction & Assessment

Instructional Strategies:

  • Audio Visual Materials
  • Case Studies
  • Classroom Exercise
  • Discussion
  • Lectures
  • Practical Exercises

Methods of Assessment:

  • Examinations
Supplemental Materials