MTI Class List

CC 215 - Macintosh® Triage and Imaging

MTI provides the fundamental knowledge and skills necessary to use the OS X operating system, identify and collect volatile data, and acquire forensically-sound images of Apple Macintosh computers. Students gain hands-on experience scripting and using automated tools to conduct a simulated live triage.  Students also use multiple methods to acquire forensically-sound images of a Apple Macintosh computer and identify unique challenges this task may present.

• OS X basics. Navigating and configuring the graphical and command line interfaces.
• Live triage basics. Live triage vs. traditional seizure models. Persistent vs. non-persistent data. Data acquisition order.
• Performing live triage. Preserving data from systems in different states. Commands for collecting non-persistent data. Introduction to shell scripting.
• Macintosh imaging. Manual and automated imaging methods. Identifying imaging challenges.

MTI is a 2-day classroom course.


• CC 101 – Basic Data Recovery & Acquisition (BDRA) classroom course   Register

Equivalent training and/or experience may substitute for the prerequisite.

There are 5 MTI classes currently scheduled.
Tue, Sep 20, 2016 2 Days Charleston County Sheriff's Office
3691 Leeds Avenue
North Charleston, SC 29405
Mon, Oct 03, 2016 2 Days Pennsylvania State Police
1800 Elmerton Avenue
Harrisburg, PA 17110
Tue, Oct 25, 2016 2 Days Marathon County Sheriff's Department
7255 Packer Drive
Wausau, WI 54401
Mon, Nov 14, 2016 2 Days Suwanee Police Department
Training Center
2966 Lawrenceville Suwanee RD
Suwanee, GA 30024
Mon, Dec 05, 2016 2 Days Birmingham Police Department
401 6th Avenue South
Birmingham, AL 35205

Back to List

Forensics Tool Testing

National Institute of Standards and Technology

In an effort to enhance its support for law enforcement at the state and local level, NW3C participates in the National Institute of Standards and Technology’s Computer Forensics Tool Testing (CFTT) steering committee.

More . . .

Hosting NW3C Classes

If you are interested in hosting NW3C’s training in your area please review the appropriate information below. Note that your agency will be allowed to reserve seats for the class(es) and must meet the criteria described in the document associated with the type of hosting you request.

Training Contacts

Instructor Led
Phone:   (877) 628-7674


NW3C Social Media Channels

© 2012. NW3C, Inc. d/b/a the National White Collar Crime Center. All Rights Reserved.
Disclaimer | Privacy Policy | Sitemap