The 2-day, Cellebrite Mobile Forensics Fundamentals (CMFF) course no longer represents an introduction to forensics, often referred to as the basics. Rapid evolutions in technology and the increasing variety of mobile communication devices and Internet of Things appliance demand more from persons engaged in digital forensics. The CMFF curriculum provides attendees with compulsory digital forensics core knowledge (fundamentals) including: mobile device communication networks, explorations of Android and iOS file systems, extraction methodologies, memory (NAND) functions, and the proper handling of digital evidence for use in administrative, civil, or criminal actions. Moreover, attendees will learn the reasoning and strategies (concepts) used by creditable practitioners and organizations to form the future of digital forensic best practices. Although Cellebrite products are used in CMFF, the course is not a single tool or application centric program. Cellebrite believes a responsibility exists to teach members of the digital forensic community the necessary competencies to conduct exams ethically, using universal professional standards.
- Module 1 – Introduction
- Module 2 - Introduction to Mobile Devices
- Module 3 - Forensic Process Overview
- Module 4 - Extraction Methodologies
- Module 5 - Data Encoding and Storage
- Module 6 - Reader About CCO:
The 2-day, Cellebrite Certified Operator (CCO) course is a valuable mobile forensic certification program, with an extraordinary emphasis on the digital forensics tools operator. Immediately following perfunctory introductions, no time is wasted, and participants begin hands-on activities installing software and pre-extraction device activities. The CCO program is designed to improve digital forensics workflows by exposing attendees to a linear evidence collection, examination, and post-processing architecture. The course is designed to accommodate passive and active learner styles. Each module and topic include dynamics to encourage the reception, processing, and retention of the skills needed to operate the Touch 2, 4PC, and Physical Analyzer for: cloning SIM cards, completing extractions with boot-loaders and other techniques, troubleshooting problematic mobile device extractions, and triaging devices to create reports for the expedited service of cases. Beyond the use of Cellebrite products to complete the many hands-on exercises in CCO, the course focuses on the observable and measurable knowledge skills and abilities befitting a legitimate certification course, meeting Quality Matters standards. Cellebrite believes a responsibility exists to teach members of the digital forensic community the necessary competencies to conduct exams ethically, using universal professional standards.
- Module 1 - Course Introduction
- Module 2 - Pre-Extraction Considerations
- Module 3 - Touch 2 and 4PC
- Module 4 - Cellebrite Extraction Methodologies
- Module 5 - Triage Report and Physical Analyzer
The 3-Day Cellebrite Certified Physical Analyze course lessons extend well-beyond the use of a single digital forensic tool. The CCPA curriculum focuses on the data analysis. CCPA is not a theory or hypothesis course; instead, the course is an intensive concentration on data analysis principles and applications. Using realistic datasets, participants will engage in exercises in data analysis designed to mimic elements of real-world investigations. Attendees will learn the distinctions between Android and iOS file systems, then learn to locate valuable data repositories. Among the advanced techniques introduced in CCPA is: first, the use of an SQLite Wizard that allows practitioners without script writing proficiencies to graphically decode database; second, the use of advanced emulator to visualize applications and data recovered from mobile communication devices. The course lessons conclude with learning the processes needed to create a meaningful Report of Findings or the creation of a Reader file to work cooperatively with other case stakeholders. The observable and measurable knowledge skills and abilities taught in the CCPA course are befitting a legitimate certification course, meeting Quality Matters standards. Cellebrite believes a responsibility exists to teach members of the digital forensic community the necessary competencies to conduct exams ethically, using universal professional standards.
- Module 1 - Course Introduction
- Module 2 - Physical Analyzer Overview
- Module 3 - Introduction to Smart Phone Analysis
- Module 4 - Data Analysis Techniques
- Module 5 - SQLite Wizard
- Module 6 - Virtual Analyzer
- Module 7 - Verification and Validation
- Module 8 - Plug-in Chain Manager
- Module 9 - Reporting