CUFO - Cellebrite UFED Field Operator Online

Course type: On Line On Demand
Region: North America
Location: On demand
Log in to see the options to register for this course. If you do not already have an account, create your FREE account. Creating an account does not obligate you to enroll or pay for classes.

About this course

Description
NOTICE: This course is for UFED InField Software and Kiosk-based solutions only. It is not training in our Pro Series Forensic Core classes that use UFED Touch, UFED4PC and our Logical/Physical Analyzer Software. The Cellebrite UFED Field Operators (CUFO) Course is designed for examiners with little exposure to or experience in mobile device forensics. This 1-day course focuses on the use of Cellebrite’s UFED Kiosk to perform logical extractions, password bypasses and the analysis of evidentiary items using the UFED InField software.


Course Access

Students have a 90-day limited time period to access and complete all content, activities, and exams for this class. Access begins on the day the student’s enrollment is confirmed (voucher consumption) and can be monitored in the top left-hand menu of the class homepage, by use of a timer which shows students the number of days remaining for their access.

  • Although this is a self-paced fully online class, we suggest students follow a similar schedule to the instructor-led format (provided in the next section) in order to ensure they successfully complete the entire class, before their access period expires.
  • In the event that additional access time is needed, the student must wait until the number of days reaches 0 days, at which point the countdown will become a button to request an extension of 30-days. You will not be able to request the extension prior to the expiration of those days, to ensure you get an additional full-term for the request.
  • Extension requests typically take 1-2 business days to review/approve and limited to a one-time request. If the student fails to complete the course after the approval of the 30-day extension, you may be required to purchase the class again and start over.



E -Training_CourseSyllabus_CUFO_Rev 06-16_English.pdfE -Training_CourseSyllabus_CUFO_Rev 06-16_English.pdf
Learning objectives
CUFO Course Objectives


Mobile Phone Technology

  • Identify mobile device hardware
  • Describe how devices communicate
Data Storage Locations

  • Storage on mobile devices
  • Storage on SIM cards
  • Storage on SD cards

UFED Kiosk Overview

  • Hardware overview
  • Kiosk process
  • Extraction overview

Forensic Handling of Mobile Devices

  • Importance of mobile devices
  • Legal authority
  • Technologies
  • Concealment
  • Isolation and shielding of mobile devices
  • Model identification, IMEI, web resources, and software
  • Device state consideration and collection procedures
  • Chain of custody, documentation, transport, and storage

Kiosk SIM Extractions

  • SIM identification and types
  • Data extraction
  • Radio isolation cards

Kiosk Device Extractions

  • Kiosk device identification methods
  • UFED camera
  • Password/PIN extraction and removal
  • Logical extraction of mobile data
  • Configuration changes

Viewing Data on Kiosk

  • Data display
  • Bookmarking data
  • Applying filters
  • Creating reports
  • Saving extraction data

Kiosk SD Card Extraction

  • SD and storage card types
  • SD card extraction with Kiosk
  • Use of write-blocker


Class details