Cellebrite Learning Center

Level - Entry Course Length: 2 Days

The Cellebrite Mobile Forensics Fundamentals (CMFF) course is a 2-day entry level program designed for investigators to identify mobile device hardware and understand the general forensic process. Students will learn how the four phases of the forensics process are related and demonstrate how to handle devices following best practices. Students will also conduct basic analysis of extracted device data and generate reports using UFED Reader software. Download CMFF Syllabus Find a CMFF Class Take CMFF Online

Bundle pricing available for this course!

This is the starting point for first responders, investigators and CSI staff tasked with identifying and seizing mobile devices for data acquisition, it does not include conducting extractions. The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam. Students achieve the CMFF certificate of completion upon passing an examination with a score of 80% or better. The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam.

Earn college credit for Cellebrite courses! Get more details here! To receive college credit through Felician, you MUST apply and submit payment to Felician. Click here to get started.

---

The CMFF course is comprised of the following modules and lessons:

1. Introduction

2. Mobile Device Technology Overview

• Identification of mobile device hardware and operating systems.
• Discussion of how mobile devices communicate.
• Discussion of how technology affects network capacity.
• Information on how devices and subscribers are identified on networks

3. Forensics Process Overview

• Description of the first responder’s role
• Description of the four phases of the digital forensics process
• Identification of challenges when applying the process to mobile devices (Android and iOS locks)
• Discussion of the data extraction approach

4. Seizure of Mobile Devices

• The importance of evidence handling and documentation
• Identifying tools and equipment for seizing mobile devices as evidence
• Applying proper procedures for seizing mobile devices in a manner that preserves evidence integrity
• How to sterilize media to be used for storage of evidence

5. UFED Reader

• Description of UFED Reader capabilities
• Understanding of what a UFDR file is
• How to import a UFDR file into UFED Reader for analysis and reporting
• How to bookmark and filter a UFDR Report
• How to create reports from UFED Reader files

Successful class completion results in a certificate of completion and demonstration of mastery of these concepts is one of the prerequisites for students desiring to take the Cellebrite Certified Mobile Examiner (CCME) certification examination. Students considering the CCME Certification are also required to successfully complete the Cellebrite Certified Operator (CCO) course and the Cellebrite Certified Physical Analyst (CCPA) course.