IME — Investigating macOS Endpoints
13Cubed's macOS forensics certification covering Apple Silicon and Intel Mac investigation — Unified Logging, APFS/HFS+ file systems, macOS-specific artifacts (FSEvents, knowledgeC.db, Biome, .DS_Store), persistence mechanisms via LaunchDaemons/Agents, and a compromised-system capstone investigation. macOS forensics is one of the most underserved areas in the certification market — SANS FOR518 covers similar ground at roughly 10x the cost.
| Issuer | 13Cubed |
|---|
| Level | intermediate |
|---|
| Domains | Digital Forensics & Incident Response |
|---|
| Practical weight | 50% |
|---|
| Cost (USD) | 895 |
|---|
| Renewal | Never expires |
|---|
| Skills | digital_forensics, file_system_analysis, evidence_handling, timeline_analysis |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap