macOS/APFS Examinations with AXIOM

In this lab we will explore Magnet AXIOM’s support for macOS and APFS. We will consider acquisitions, processing, and interactive examinations to leverage AXIOM’s various explorers for faster examinations, timeline analysis, artifact relationships, and more.

This course is perfect for those using Windows workstations for Macintosh evidence without missing Mac-exclusive artifacts.

This lab is applicable to both criminal and corporate investigations. Participants of this hands-on lab will receive 1 CPE credit for attending.