This course teaches students to identify various artifacts typically located in property lists and SQLite databases on macOS®-based computers. It also teaches students how to perform forensic analysis. Key concepts covered in this course include processing basics, SQLite databases, SQLite queries, and native system-related artifacts. Students will use hands-on practical experience writing basic SQLite queries and learn to analyze operating system artifacts. The forensic artifacts covered in this course include user login passwords, FaceTime®, messages, mail, contacts, calendars, reminders, notes, photos, Safari®, Google Chrome™, and Mozilla Firefox®.

Students who complete this course and pass the post-test are eligible for 1.0 point toward the 3CE certification.

Key concepts covered in this course include: 

• Processing basics
• SQLite databases
• SQLite queries
• Artifacts

This is an advanced course, intended for digital forensic examiners who have experience working with macOS, and experience preserving and collecting data of evidentiary value.

• Introduction to Previewing (online course)
• Encryption (online course)
• How Computers Work & Store Data (online course)
• Basic Digital Forensic Analysis: Windows Acquisition (classroom or live online course)
• Intermediate Digital Forensic Analysis: Automated Forensic Tools (classroom or live online course)
• Intermediate Digital Forensic Analysis: SQLite Primer(classroom or live online course)

This training will be delivered by highly qualified instructors in the field of Computer Forensics.

Duration (Days): 4

Please register your interest for the courses & we will inform you of the next intake.

We will update as soon as the course schedule is confirmed.

Meanwhile, please Register your interest to receive the most updated news:

• NW3C Courses
• Magnet Courses

Regarding Tuition Fees, please contact us to find out more.