The Cellebrite Certified Operator (CCO) course is a 2-day intermediate level certification program which builds on the concepts from the CMFF course. This course is designed for those participants tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC. This course aims to teach data extraction team members such as technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and personnel designated to handle the extraction of digital evidence how to perform extractions on a variety of devices. 

These extractions include logical, file system and physical extractions from mobile devices as well as SIM cards, and external storage such as SD cards. Participants in this course will gain a basic understanding of how to open the extractions in Physical Analyzer software, conduct basic searches and how to create bookmarks and reports. 

The Cellebrite Certified Physical Analyst (CCPA) course is a 3-day advanced level program designed for technically savvy investigators, digital evidence analysts, and forensic practitioners. As this course focuses on the analysis and advanced search techniques using Physical Analyzer, participants will not be conducting extractions from devices in this course. Physical Analyzer software will be used extensively to explore recovered deleted data, database contents, advanced search and analysis techniques, verification and validation, and reporting.

Course Access

Students have a 45-day limited time period to access and complete all content, activities, and exams for this class. Access begins on the day the student’s enrollment is confirmed (voucher consumption) and can be monitored in the top left-hand menu of the class homepage, by use of a timer which shows students the number of days remaining for their access.

• Following this period, a single 15-day extension can be requested. The student must wait until the number of days reaches 0 days, at which point the countdown will become a button to request an extension of 15-days.
• Extension requests typically take 1-2 business days to review/approve and limited to a one-time request. If the student fails to complete the course after the approval of the 15-day extension, you may be required to purchase the class again and start over.

More details on this policy can be viewed here.

Completion Requirements

For CMFF: Knowledge-based assessment with a score of 80% or higher.

For CCO and CCPA: Students must pass an exam at the end of the course with a minimum score of 80.
Students will receive a maximum of two attempts. If a student fails their first attempt, they must request for their second attempt via Technical Support ticket.

Prerequisites and Continued Learning

Prerequisites

None

Recommended next course(s) / certification(s):

• Cellebrite Certified Mobile Examiner Certification (CCME)

Recertification Requirements

CCO and CCPA are core certifications, which are valid for 2 years. Therefore, students are expected to re-certify during their 2nd year of certification.
Full details on the recertification process can be reviewed on the About Cellebrite Certifications page.