CSA 401 - MAC (Apple) Forensics

(3 credits)

As Apple continues to expand its footprint in both the private and corporate sectors, the demand for forensic expertise tailored to Apple’s ecosystem grows significantly. Building on the foundation set in Digital Forensics I and II, which primarily focused on the Windows operating system, this advanced course is designed to enhance students’ skills and knowledge by focusing on the identification, extraction, decoding, and interpretation of data from Apple devices. Students will explore the specialized tools and methodologies applicable to Apple’s operating systems and file systems such as APFS and HFS+. The course will be delivered through a combination of lectures, hands-on labs, and case studies. Students will engage in practical exercises that simulate real-world forensic investigations, reinforcing their learning and preparing them to handle complex forensic challenges in the Apple ecosystem. Prerequisite(s): CSA 202. Alternate years.