We see more Mac devices at work, but structured training has been rare. The lab flow was clear, and the instructor took every question through to the end. The room was well kept, so the long hours were manageable.
2026 Mid-year MWME Certification Training (September)
Hands-on macOS forensic training held at the Seoul Doksan Training Center.
Course info
Instructor
Digital Forensics | Incident Response | Integrated Security Expert
Sugyo Moon, Team Lead
Tech Team Lead, INSEC Security
Team Lead, INSEC Training Center
About this course
Authorized MWME course covering macOS disk, memory, and artifact analysis through hands-on labs. The 2026 mid-year (September) session was held at the Seoul Doksan Training Center.
- macOS artifact collection and analysis labs
- Delivered to the official MWME curriculum
- Workflow aligned with field investigation steps
- Training linked to the certification exam
- Held at the Seoul Doksan Training Center
Student reviews
Self-study on Mac forensics has always felt scattered. They explained why each artifact matters, step by step, and it finally made sense. Clean facilities and a proper lab setup helped me stay focused.
I attended as institutional training. It was not a formality. The course was built to be used in the field. The pace was reasonable, lab time was enough, and the days were well spent.
I worried the labs would be too much, but the instructor checked in beside us so I could keep up. Mac disk and artifact analysis had felt vague; this course gave it a shape. The classroom was comfortable as well.
Quite different from theory-only lectures. Working in actual analysis order gave me a procedure I can take back to work. Questions were answered on the spot. The center looked well run.
A short schedule, but dense in a good way. Mac forensics was framed from a field perspective, and the lab PCs and room were tidy enough to focus. The course was run steadily.

