IMPORTANT INFORMATION ABOUT ONLINE ON-DEMAND REQUIREMENTS

To participate in this On-Demand course, students must have:

• Access to licensed either a UFED Touch2 or UFED4PC to use during the course.
  
• A computer capable of running UFED Physical Analyzer software.
  
• A dongle or software license to use UFED Physical Analyzer software.
  
• An active internet connection to take this course online.
  

Cellebrite will provide:

• The appropriate student manual
  
• Certain required materials based on the course taken. Click here for a full list of materials required and/or provided.

Time Limit: Participants will have access to the course and all associated course resources for three months (90 days).

Students who do not already have or have access to currently licensed Cellebrite hardware and software are
encouraged to take one of our Instructor-Led or Live Online classes.

Course Access

Students have a 90-day limited time period to access and complete all content, activities, and exams for this class. Access begins on the day the student’s enrollment is confirmed (voucher consumption) and can be monitored in the top left-hand menu of the class homepage, by use of a timer which shows students the number of days remaining for their access.

• Although this is a self-paced fully online class, we suggest students follow a similar schedule to the instructor-led format (provided in the next section) in order to ensure they successfully complete the entire class, before their access period expires.
  
• In the event that additional access time is needed, the student must wait until the number of days reaches 0 days, at which point the countdown will become a button to request an extension of 30-days. You will not be able to request the extension prior to the expiration of those days, to ensure you get an additional full-term for the request.
  
• Extension requests typically take 1-2 business days to review/approve and limited to a one-time request. If the student fails to complete the course after the approval of the 30-day extension, you may be required to purchase the class again and start over.
  

About CMFF: 

The 2-day, Cellebrite Mobile Forensics Fundamentals (CMFF) course no longer represents an introduction to forensics, often referred to as the basics. Rapid evolutions in technology and the increasing variety of mobile communication devices and Internet of Things appliance demand more from persons engaged in digital forensics. The CMFF curriculum provides attendees with compulsory digital forensics core knowledge (fundamentals) including: mobile device communication networks, explorations of Android and iOS file systems, extraction methodologies, memory (NAND) functions, and the proper handling of digital evidence for use in administrative, civil, or criminal actions. Moreover, attendees will learn the reasoning and strategies (concepts) used by creditable practitioners and organizations to form the future of digital forensic best practices. Although Cellebrite products are used in CMFF, the course is not a single tool or application centric program. Cellebrite believes a responsibility exists to teach members of the digital forensic community the necessary competencies to conduct exams ethically, using universal professional standards.

About CCO: 

The Cellebrite Certified Operator (CCO) course is a 2-day intermediate level certification program which builds on the concepts from the CMFF course. This course is designed for those participants tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC. This course aims to teach data extraction team members such as technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and personnel designated to handle extraction of digital evidence how to perform extractions on a variety of devices. These extractions include logical, file system and physical extractions from mobile devices as well SIM cards, and external storage such as SD cards. Participants in this course will gain a basic understanding of how to open the extractions in Physical Analyzer software, conduct basic searches and how to create bookmarks and reports. NOTE: It is strongly recommended that students attending this course complete the Cellebrite Mobile Forensics Fundamentals (CMFF) course or test out prior to attending.

About CCPA: 

The Cellebrite Certified Physical Analyst (CCPA) course is a 3-day advanced level program designed for technically savvy investigators, digital evidence analysts, and forensic practitioners. As this course focuses on the analysis and advanced search techniques using UFED Physical Analyzer, participants will NOT be conducting extractions from devices in this course. UFED Physical Analyzer software will be used extensively to explore recovered deleted data, database contents, advanced search and analysis techniques, verification and validation, and reporting. 

CMFF Course Objectives

Upon successful completion of this course, the student will be able to:

• Identify mobile device hardware
  
• Discuss how devices communicate
  
• Describe the four phases of the digital forensic process
  
• Describe the importance of evidence handling and documentation
  
• Describe the tools and techniques for acquiring data from mobile devices
  
• Define the types of data encoding used on mobile devices

CCO Course Objectives

Upon successful completion of this course, the student will be able to:

• Install and configure UFED Touch, UFED Touch 2 or UFED 4PC and Physical Analyzer software.
  
• Explain the best practices for the on-scene identification, collection, packaging, transporting, examination and storage of digital evidence data and devices.
  
• Display best practice when conducting cell phone extractions. 
  
• Identify functions used within UFED Touch, UFED Touch 2 or UFED 4PC to perform supported data extractions.
  
• Exhibit how to open extractions using Physical Analyzer.
  
• Summarize how to conduct basic searches using Cellebrite Physical Analyzer.
  
• Outline how to create reports using Cellebrite Physical Analyzer.
  
• Demonstrate proficiency of the above learning objectives by passing a knowledge test and practical skills assessment with a score or 80% or better. 

CCPA Course Objectives

Upon successful completion of this course, the student will be able to:

• Conduct advanced mobile device forensic analysis using the UFED Physical Analyzer software.
  
• Recall techniques used for authentication and validation of data parsed and collected as evidence.
  
• Identify functions within Physical Analyzer software which allow examination of various types of data.
  
• Recognize Physical Analyzer’s capabilities to generate custom reports in an organized manner. 
  
• Demonstrate proficiency of the above learning objectives by passing a knowledge test and practical skills assessment with a score or 80% or better.