High Technology Crime Investigation Association
Prev MonthPrev Month Next MonthNext Month
Mid-Atlantic 2019 3rd Qtr Training Event
Magnet Forensics
2250 Corporate Park Drive, Suite 130
Herndon, VA 20171
Monday, August 19, 2019, 9:00 AM - 1:00 PM EDT
Category: Chapter Meeting

Join Trey Amick from Magnet Forensics as he walks through forensic artifacts and techniques that are essential for Mac Investigations!

Topics to be discussed in the session:

  • Learn about the Apple File System (APFS) and the changes made as part of the update from HFS+

  • Overview of the best techniques used to succesfully completing macOS investigations

  • Overview of the APFS Operating System artifacts and files such as: KnowledgeC.db, FSEvents, Volume Mount Points, Quarantined Files, and bash history

  • Overview of how these artifacts will help connect the dots in your investigations


9:00 – 9:30 AM: Registration

9:30 – 11:30 PM: Presentation

11:30 – 1:00 PM: Lunch & Networking

Contact: Ron Mays, President HTCIA Mid-Atlantic Chapter