SANS Institute Introduces All Apple, Mac and iDevice, Forensic Analysis Course

BETHESDA, Md., Aug. 26, 2014 /PRNewswire-USNewswire/ -- To help digital forensic and incident response (DFIR) professionals take on any Apple case without hesitation, the SANS Institute today introduced the new FOR518: Mac Forensic Analysis course. This intense hands-on forensic analysis course will help Windows-based investigators broaden their analysis capabilities and achieve the confidence and knowledge needed to comfortably analyze any Mac or iOS system without hesitation.

SANS will debut the new FOR518: Mac Forensic Analysis course at SANS Crystal City in Virginia, September 8 – 13. A second run course will be offered at SANS Seattle 2014, September 29 - October 6.

"From coffee shops to corporate boardrooms, Apple devices can be found nearly everywhere. As these devices continue to grow in popularity, digital forensic investigators and analysts must start paying more attention to them," said Sarah Edwards, SANS Course Author  and Digital Forensic Analyst. "The goal of the FOR518: Mac Forensic Analysis course is to help form well-rounded investigators by introducing Mac forensics into a Windows-based forensics world to ensure accurate and helpful data can be recovered, regardless of device."

Attendees of the FOR518: Mac Forensic Analysis Course will learn:

• Mac Fundamentals: How to analyze and parse the Hierarchical File System (HFS+) file system by hand and recognize the specific domains of the logical file system and Mac-specific file types.
• User Activity: How to understand and profile users through their data files and preference configurations.
• Advanced Analysis and Correlation: How to determine how a system has been used or compromised by using the system and user data files in correlation with system log files.
• Mac Technologies: How to understand and analyze many Mac-specific technologies, including Time Machine, Spotlight, iCloud, Versions, FileVault, AirDrop, and FaceTime.

For more information about SANS FOR518: Mac Forensic Analysis, or to register for an upcoming course, please visit: http://www.sans.org/info/166337

About SANS Institute
The SANS Institute was established in 1989 as a cooperative research and education organization. SANS is the most trusted and, by far, the largest provider of training and certification to professionals at governments and commercial institutions world-wide. Renowned SANS instructors teach over 50 different courses at more than 200 live cyber security training events as well as online. GIAC, an affiliate of the SANS Institute, validates employee qualifications via 27 hands-on, technical certifications in information security. The SANS Technology Institute, a regionally accredited independent subsidiary, offers master's degrees in cybersecurity. SANS offers a myriad of free resources to the InfoSec community including consensus projects, research reports, and newsletters; it also operates the Internet's early warning system--the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to help the entire information security community. (www.SANS.org)

SOURCE SANS Institute