To participate in this On-Demand course, students must have:
Cellebrite will provide:
Time Limit: Participants will have access to the course and all associated course resources for 45 days.
Students who do not already have or have access to currently licensed Cellebrite hardware and software are encouraged to take one of our Instructor-Led classes or Live Online classes (when available).
Students have a 45-day limited time period to access and complete all content, activities, and exams for this class. Access begins on the day the student’s enrollment is confirmed (voucher consumption) and can be monitored in the top left-hand menu of the class homepage, by use of a timer which shows students the number of days remaining for their access.
Following this period, a single 15-day extension can be requested.
More details on this policy can be viewed here.
The Cellebrite UFED Field Operators (CUFO) Course is designed for examiners with little exposure to or experience in mobile device forensics. This 1-day course focuses on the use of Cellebrite’s UFED Kiosk to perform logical extractions, password bypasses and the analysis of evidentiary items using the UFED InField software.
This course exposes students to the fundamentals of mobile device investigations, extraction of user data, and analysis of mobile devices using the UFED Kiosk. Operation of the Cellebrite UFED Kiosk product to perform a number of hands-on logical extractions on various mobile devices with a variety of operating systems is a key component of this class. Skill sets also include creating Safety SIMs and extracting evidentiary data from SIM cards. Participants also create reports on extracted data. It should be noted that times allocated to course content do not include course introduction or examination time.
Mobile Device Technology Overview
In this module, you will obtain a baseline of how cellular devices operate and discuss possible artifacts of interest from an investigative point of view.
Data Locations
In this module, you will learn where data can be stored on a mobile device. You will also be introduced to the UFED Kiosk and UFED InField software, the various types of extractions and some of the challenges encountered in mobile device examination.
Forensic Handling of Mobile Devices
In this module, you will learn about industry standard collection techniques involving mobile devices and discuss the implications for pertinent digital evidence recovery.
UFED Kiosk Tour
In this module, you will take a tour of the UFED Kiosk and be introduced to its features. You will learn how to connect mobile devices and how to save your data.
SIM Extraction with UFED Kiosk
In this module, you will be introduced to a SIM card data extraction. You will learn how to create a safety SIM (network isolation card).
Mobile Device Extraction with UFED Kiosk
In this module, you will be introduced to mobile device data extraction using the UFED Kiosk. You will perform an extraction and use the UFED camera.
SD Card Extractions with UFED Kiosk
In this module you will be introduced to storage card (SD) data extraction using the UFED Kiosk. You will understand the importance of write-blocking while performing extractions.
Viewing Data using the UFED Kiosk
In this module you will learn to view the extracted data on the UFED Kiosk. You will learn how to use filters, watch lists and tag (bookmark) items of interest. You will be introduced to reports and how to save data including reports and extracted data.