Thursday, December 1st

macOS Forensics: decryption and analysis of APFS images from Macs with T2

The upcoming webinar will demonstrate how to deal with MacBooks with Apple T2 Security Chip. We will cover decryption—a raw nerve of every DFIR expert—as well as analysis of the acquired and decrypted data.

Jared Luebbert

Forensic Sales Engineer, Belkasoft

As a respected Digital Forensics Expert and Litigation Support Professional, Jared has years of experience performing digital forensic collection and analysis worldwide.

Toni Pärn

Director of Sales, Passware

Toni is an expert in decryption and can guide you through Passware forensic products to find the right solution for discovering evidence and recovering passwords.

The upcoming webinar will demonstrate how to deal with MacBooks with the Apple T2 Security Chip. Apple produced Mac computers with the T2 chip starting from 2018, and this security chip protects up to the most recent Intel-based Mac mini computers.

A Mac with a T2 chip may just be the next data source in your next case, so improving your knowledge of the capabilities regarding these Apple T2 chipsets and macOS forensics, is a must!

During this webinar, we will cover decryption—a raw nerve of every DFIR expert—as well as analysis of the acquired and decrypted data of a Macbook with a T2 chipset.

During the upcoming webinar you will learn to:

Acquire disk image
Recover password and decrypt data
Extract and analyze the acquired image
Parse a file system, extract system artifacts, and application data

You will get answers to the following questions:

How secure the Apple T2 Chip is?
How efficient the brute-force attack is?
What is required to decrypt the T2?
What can be done to accelerate the password recovery on Macs with T2?
What can you extract from the acquired T2 image?
What are macOS system artifacts you extract and why are they important in DFIR?

The webinar will take place on December 1, 2022.

Reserve your spot today:

Country *:

Organization type *:

Please select timeslot:

10am CET (Berlin) / 5pm SST (Singapore) / 8pm AEDT (Sydney)

9am PST (Los Angeles) / 12pm EST (New York) / 2pm BRT (Rio de Janeiro)

Thank you for your registration!

Two time slots are available to suit most timezones around the globe:


	10am	CET (Berlin)
	5pm	SST (Singapore)
	8pm	AEDT (Sydney)


	9am	PST (Los Angeles)
	12pm	EST (New York)
	2pm	BRT (Rio de Janeiro)