No products in the cart.
Course Curriculum
| Before the course | |||
| (W00) Course Instructions | 00:00:00 | ||
| (W37M01) MacOS Anti-forensics: The Introduction | 00:00:00 | ||
| (W37M02) MacOS Anti-forensics: Releases & Components | 00:00:00 | ||
| (W37M03) People working in macOS anti-forensics & Wrap-up | 00:00:00 | ||
| (W37M04) MacOS components and anti-forensics | 00:00:00 | ||
| (W37A01) Introductory Assignment | 30, 00:00 | ||
| Module 1 | |||
| (W37M05) Introduction to Module 1 | 00:00:00 | ||
| (W37M06) Introduction to macOS anti-forensics | 00:00:00 | ||
| (W37M07) Categories of macOS anti-forensics | 00:00:00 | ||
| (W37M08) macOS components critical for anti-forensics | 00:00:00 | ||
| (W37M09) Category - Data Hiding | 00:00:00 | ||
| (W37M10) Category - Artefact wiping | 00:00:00 | ||
| (W37M11) Category - Trail Obfuscation | 00:00:00 | ||
| (W37M12) Category - Attacks Against Forensics | 00:00:00 | ||
| (W37M13) Category - Case Study - the Marble framework | 00:00:00 | ||
| (W37M14) Privacy protection in Safari, Part 1 | 00:00:00 | ||
| (W37M15) Privacy protection in Safari, Part 2 | 00:00:00 | ||
| (W37A02) Module 1 Assignments | 30, 00:00 | ||
| Module 2 | |||
| (W37M16) Tooling introduction - data hiding | 00:00:00 | ||
| (W37M17) Data hiding - SilentEye walkthrough | 00:00:00 | ||
| (W37M18) Data hiding - SilentEye Overview | 00:00:00 | ||
| (W37M19) Data Hiding - SilentEye - Pros and Cons | 00:00:00 | ||
| (W37M20) Data hiding experiments: SilentEye - lab setup | 00:00:00 | ||
| (W37M21) SilentEye - Steganography without encrytpion | 00:00:00 | ||
| (W37M22) SilentEye: Steganography with encryption | 00:00:00 | ||
| (W37M23) SilentEye: File in an image steganography without encryption | 00:00:00 | ||
| (W37M24) SilentEye: File in an image steganography with encryption | 00:00:00 | ||
| (W37M25) Data hiding: Intro to Filevault | 00:00:00 | ||
| (W37M26) Data hiding: enable Filevault | 00:00:00 | ||
| (W37M27) Data hiding: disable Filevault | 00:00:00 | ||
| (W37M28) Datahiding: Filevault Pros and Cons | 00:00:00 | ||
| (W37M29) What is artefact wiping? | 00:00:00 | ||
| (W37M30) Artefact wiping with Disk Utility | 00:00:00 | ||
| (W37M31) Experiments with Disk Utility | 00:00:00 | ||
| (W37M32) Diskutulity Pros and Cons | 00:00:00 | ||
| (W37M33) Intro to Disk Utility debug model | 00:00:00 | ||
| (W37M34) Experiments with Disk Utility Debug | 00:00:00 | ||
| (W37M35) Disk Utility Debug Pros and Cons | 00:00:00 | ||
| (W37M36) What is trail obfuscation? | 00:00:00 | ||
| (W37M37) Trail obfuscation experiments | 00:00:00 | ||
| (W37M38) Trail obfuscation - experiment | 00:00:00 | ||
| (W37M39) Tunnelblick and obfsproxy - Lab setup | 00:00:00 | ||
| (W37M40) Tunnelblick walkthrough | 00:00:00 | ||
| (W37M41) Trail obfuscation - Get the IP address | 00:00:00 | ||
| (W37M42) Tunnelblick - Pros and Cons | 00:00:00 | ||
| (W37M43) Attacks against forensics - introduction | 00:00:00 | ||
| (W37M44) What is counterforensics? | 00:00:00 | ||
| (W37M45) What is CyberChef? | 00:00:00 | ||
| (W37M46) Lab Setup - CyberChef | 00:00:00 | ||
| (W37M48) CyberChef walkthrough | 00:00:00 | ||
| (W37M49) CyberChef operation DateTime | 00:00:00 | ||
| (W37M50) CyberChef operation zip/unzip | 00:00:00 | ||
| (W37M51) CyberChef operation: hashing | 00:00:00 | ||
| (W37M52) How to work with a recipe | 00:00:00 | ||
| (W37M53) CyberChef - Morse Code | 00:00:00 | ||
| (W37M54) Cyberchef: dataformat | 00:00:00 | ||
| (W37M55) CyberChef - pros and cons | 00:00:00 | ||
| (W37M47) Information on module 2 examination | 00:00:00 | ||
| (W37A03) Module 2 Assignments - Theory | 30, 00:00 | ||
| (W37A04) Module 2 Assignments - Practice | 30, 00:00 | ||
| (W37M00) Usecases - Addendum | 00:00:00 | ||
| (W37A03) Module 2 Assignments - Theory | 30, 00:00 | ||
| (W37A04) Module 2 Assignments - Practice | 30, 00:00 | ||
| Module 3 | |||
| (W37M00) Module 3 Introduction | 00:00:00 | ||
| (W37M56) Forensics vs Anti-Forensics Arms Race | 00:00:00 | ||
| (W37M57) Anti-Forensics - macOS vs Windows | 00:00:00 | ||
| (W37M58) Windows Anti-Forensic Tools - BitLocker | 00:00:00 | ||
| (W37M59) Case Study - IoT | 00:00:00 | ||
| (W37M60) Case study - fileless malware | 00:00:00 | ||
| (W37M61) Effectiveness of Anti-Forensics Software | 00:00:00 | ||
| (W37M62) Case Study - Azure Sphere | 00:00:00 | ||
| (W37M63) Case Study - ITP2 | 00:00:00 | ||
| (W37M64) Case-Study - Celeb Gate | 00:00:00 | ||
| (W37M65) iOS and macOS - future plans | 00:00:00 | ||
| (W37A05) Module 3 Exercises | 30, 00:00 | ||
| (W37M00) Addendum: FAQ - Project Marzipan | 00:00:00 | ||
| Final Exam | |||
| (W37A06) Final Exam | 30, 00:00 | ||