Close menu
FILTER BY:
No Results Found, Please Try Again
-
Cellebrite Certified Operator and Cellebrite Certified Physical Analyst Bundle for inseyets5-Day | Intermediate/Advanced -
CCO Inseyets -
CCPA Inseyets -
Cellebrite Advanced Smartphone Analysis (CASA) for Inseyets5-Day | Advanced -
Cellebrite Operator of Inseyets UFED (COIU)1/2-Day | Entry -
Cellebrite Pathfinder Training (CPT)2-Day | Entry -
Certified Evidence Repair Technician – Forensic (CERT-F)5-Day | Expert -
Cellebrite Collector and Inspector Operator (CCIO)4-Day | Entry -
Cellebrite Certified Premium Operator (CCPO)2-Day | Intermediate -
Cellebrite Apple Forensic Fundamentals (CAFF)4-Day | Entry -
Training to Accelerate the Full Potential of Pathfinder
-
Cellebrite Mobile Forensic Fundamentals (CMFF)2-Day | Entry -
Cellebrite Apple Intermediate Forensics (CAIF)3-Day | Intermediate -
Cellebrite Windows Forensic Investigations (CWFI)Mobile Forensics -
Cellebrite Apple Advanced Forensics (CAAF)3-Day | Advanced -
Cellebrite Chip-Off Forensics Training (CCOF)5-Day | Expert -
Cellebrite Reader1-Day | Entry -
Cellebrite Advanced Video Analysis (CAVA)Mobile Forensics -
Cellebrite Certified Recovery Specialist (CCRS)Certification -
Cellebrite Certified Mobile Examiner (CCME) for InseyetsCertification
-
LevelAdvanced -
LengthThree-Day
(21 Hours) -
Delivery ModeIn-Person
Virtual -
Certification--
Upcoming Classes
FILTER BY:
No results found. Please try again later
-
In-PersonLondon GMT+1
Oct 13-15 -
VirtualVirtual GMT-5Dec 02-04
-
VirtualVirtual GMT-5Feb 18-20
-
In-PersonLondon GMT+1Apr 20-22
-
In-PersonVienna, VA GMT-4Jun 08-10
-
VirtualVirtual GMT-5Jun 09-11
Course Description
Cellebrite Apple Advanced Forensics (CAAF) is a three (3)-day course designed with hands-on learning and real case scenario data using Cellebrite Inspector software. Participants will learn how to recover artifacts from allocated and unallocated space. A CAAF instructor will review the most important macOS and iOS digital artifacts common to most investigations. The advanced instruction includes a comprehensive exploration of macOS and iOS systems, deleted files from HFS+ and APFS file systems, hardware and software RAIDS, log files, extended artifacts and password data.
Course Learning Objectives
Upon successful completion of this course, students will be able to:
- Distinguish how to handle deleted files from both APFS and HFS+.
- Demonstrate how to recover artifacts from allocated and unallocated space.
- Break down hardware and software RAID.
- Understand iOS analysis advanced practices.
- Use log files to recreate usage history and create a timeline.
- Understand and examine Extended Attributes, Spotlight evidence, and file sharing artifacts.
- Identify how passwords are saved and used in macOS.
DOWNLOAD COURSE OVERVIEW →
REGISTER NOW →