Cellebrite Apple® Forensic Investigations Online OnDemand

Course type: On Line On Demand
Location: On demand

About this course

Course features

Computer Forensics - Intermediate-level course

Please Note: This course has been updated. Only current voucher holders will have access to this course. To view the details of the new course, please click here

Cellebrite Apple Forensic Investigations (CAF) is designed with hands-on learning and real case scenario data. Participants will learn how to perform both triage and analysis of specific data points that exist within operating system and file system artifacts.

The macOS and iOS operating systems, HFS+ and APFS file systems and significant application data are explored throughout the class.

All Online Course Student Manuals are now eBooks!

Cellebrite Online On Demand courses now feature eBook student manuals. These manuals can be accessed via the Cellebrite Learning Center anytime and be viewed on any device.

Added benefits to digital manuals:

  • Immediate access to student manuals
  • Accessible anytime, from anywhere, on any device within your course
  • Find what you need through easy to use search functions (if this is true)
  • Modern content format and increased accessibility (if true and OCR functions still work)

Course Access

Students have a 90-day limited time period to access and complete all content, activities, and exams for this class. Access begins on the day the student’s enrollment is confirmed (voucher consumption) and can be monitored in the top left-hand menu of the class homepage, by use of a timer which shows students the number of days remaining for their access.

  • Following this period, a single 15-day extension can be requested. The student must wait until the number of days reaches 0 days, at which point the countdown will become a button to request an extension of 15-days.
  • Extension requests typically take 1-2 business days to review/approve and limited to a one-time request. If the student fails to complete the course after the approval of the 15-day extension, you may be required to purchase the class again and start over.

More details on this policy can be viewed here.

Required Resources and Materials Provided

Cellebrite will provide students with:

  • Online On Demand Class - The learning environment used to deliver the class. 
  • Student Manual (eBook)- Provided by Cellebrite Training.
  • Students who do not already have or have access to currently licensed Cellebrite hardware and software are encouraged to take one of our Instructor-Led or Live Online classes.

    Prerequisites and Continued Learning


    NOTE: It is recommended (but not required) that students attending this course complete the Cellebrite Basic Investigator (CBFI) course prior to attending.

    Recommended next course(s) / certification(s):

    Cellebrite Advanced Apple Forensic Investigations (CAAF) course

    Recertification Requirements

    No recertification requirement

Learning objectives

Upon concluding this course, students will have reviewed up to three different case scenarios covering various file system, operating system and application artifacts relevant to real-life cases. Analysis methodologies are covered via hands-on work with actual data and instructor-led exercises. Knowledge is validated with an individual written and practical assessment. Through an interactive, hands-on approach, students will gain a strong familiarity of macOS and iOS artifacts and the confidence with which to conduct thorough examinations.

Note: While all are welcome, strong computer skills and an understanding of basic forensic concepts (imaging, live data acquisition, and evidence handling) are highly recommended for the optimal experience in this course.