CMFS is the Specialist Apple Mac Forensics Investigation Certification.
Professionals with the CMFS certificate have proven specialist in-depth knowledge of the data structures and evidence potential in Mac OS X environments. This is a highly sought after certification, as OS X operating systems are fast becoming the focus of forensics investigation resulting from the huge popularity of Apple.
CMFS Certification Path & Tracks:
CMFS Exam Syllabus
1. Introduction
Mac OS X vs. Mac OS
NeXT/BSD
Darwin
Apple Hardware
Mac OS X Server
2. System Settings
Key Directories
Time Zone and Synchronisation
System Installation
Networking
Startup
3. User Accounts
Home Directories
Logon Settings/Autologin
Password Storage
User Details
4. Activity Logging
System and Application Logs
Command and Application History
System Boot/Shutdown
5. Common Applications
iChat
iCal
Mail
iPhoto
iWorks
Mac Office
6. Web Activity
Safari
Firefox3
History, Cache, Settings
7. Files behind the Scenes
Temporary Files
Print and Preview
Trash
Sleepimage
Swapfiles
8. Partitioning
Apple Partition Map
GUID Partition Table
9. File System Basics
File System Support in Mac OS X
HFS+ vs. HFS
HFSX
HFS+ Time Stamps
Special Files vs. User Files
10. HFS+ in Detail
Volume Headers
Special Files
Hot Files
Resource Forks
iNode Files/Hard Links
11. Time Machine
Automated Backups in OS X
Time Capsule
‘As a busy Hi-Tech Crime Unit we are experiencing more and more submissions of Apple Mac computers. Having recently completed the 7Safe Applied Apple Mac Forensics: CMFS certification, this provided an excellent grounding for me to complete a complex investigation into a dangerous confidential case.
The course is based around examining Apple computers using Windows based systems. Therefore being a relatively new user to Macs, I was not prevented from completing a full examination through my lack of user-based knowledge. 7Safe continue to produce quality certifications with up to date and relevant content, the likes of which I have not experienced elsewhere’
UK Police Force
WHO IS THE CFIP CERTIFICATION FOR?
Those responsible or eager to become responsible for computer forensic investigation, including:
- Forensic & Network Investigators
- Information Security Professionals
- IT Security Officers
- Law Enforcement Officials
- Crime Prevention Officers

Cyprus
England
Greece
Ireland

