Cellebrite Certified Operator (CCO) is a two-day intermediate level certification program which builds on the concepts from the CMFF course and is designed for those participants who are tasked with extracting data in a forensically sound manner using UFED Touch2 or UFED 4PC. Students will demonstrate how to perform logical, file system and physical extractions from mobile devices, extract data from SIM cards, create forensic SIM clones, and extract data from external storage. Students will also gain a basic understanding in how to open the extractions in Physical Analyzer software, conduct basic searches, create bookmarks and reports.  Students will achieve the CCO certification certification upon passing a knowledge test and practical skills assessment with a score or 80% or better.  The only way to earn the CCO certification is by taking the exam along with an associated course, there is no test out available.  The ideal participants include data extraction team members; technically savvy investigators; digital forensic examiners; IT staff; internal affairs investigators; first responders; and evidence technicians.

Cellebrite Certified Physical Analyst (CCPA) is a three-day advanced level certification program which builds on the concepts from the CCO course and is designed for participants who conduct advanced analysis and employ advanced search techniques using UFED Physical Analyzer.  Participants will NOT be conducting extractions from devices in this course.  UFED Physical Analyzer software will be used extensively to recover deleted data, understand database contents, conduct advanced searches and analysis.  In addition, participants will learn about verification, validation and reporting.  Students will achieve the CCPA certification upon passing a knowledge test and practical skills assessment with a score or 80% or better.  The only way to earn the CCPA is by taking the exam along with an associated course, there is no test out available. The ideal participants include those who have completed CMFF and CCO, or have advanced knowledge in digital forensics.

CCO

• Install and configure UFED Touch, UFED Touch 2 or UFED 4PC and Physical Analyzer software.
  
• Explain the best practices for the on-scene identification, collection, packaging, transporting, examination and storage of digital evidence data and devices.
  
• Display best practice when conducting cell phone extractions.
  
• Describe data encoding schemes used by mobile devices to store information; including Binary, Hexadecimal, ASCII, and Unicode formats. 
  
• Identify functions used within UFED Touch, UFED Touch 2 or UFED 4PC to perform supported data extractions.
  
• Exhibit how to open extractions using Physical Analyzer.
  
• Summarize how to conduct basic searches using Cellebrite Physical Analyzer.
  
• Outline how to create reports using Cellebrite Physical Analyzer.
  
• Demonstrate proficiency of the above learning objectives by passing a knowledge test and practical skills assessment with a score or 80% or better. 
  

CCPA

• Conduct advanced mobile device forensic analysis using the UFED Physical Analyzer software.
  
• Recall techniques used for authentication and validation of data parsed and collected as evidence.
  
• Identify functions within Physical Analyzer software which allow examination of various types of data.
  
• Recognize Physical Analyzer’s capabilities to generate custom reports in an organized manner. 
  
• Demonstrate proficiency of the above learning objectives by passing a knowledge test and practical skills assessment with a score or 80% or better.