U.S. flag

An official website of the United States government, Department of Justice.

Democrats have shut down the government. Department of Justice websites are not currently regularly updated. Please refer to the Department of Justice’s contingency plan for more information.

Advanced Digital Forensic Analysis: macOS

© rawpixel-com/freepik.com (see reuse policy).
Event Dates
Eastern
Location
Indiana State Police Cybercrime & Investigative Technologies Office
Address

8468 East 21st St.
Indianapolis, IN

This course prepares students to identify various artifacts typically located in property lists and SQLite databases on MacOS-based computers, as well as learn how to perform forensic analysis. Students gain hands-on practical experience writing basic SQL queries and using to analyze operating system artifacts that includes, but is not limited to, user login passwords, FaceTime®, messages, mail, contacts, calendars, reminders, notes, photos, Safari®, Google Chrome™, and Mozilla Firefox®.

Key concepts covered in this course include: 

  • Processing basics
  • SQLite databases
  • SQLite queries
  • Artifacts

Date Created: August 11, 2022