Cellebrite Certified Operator (CCO) Course - Intermediate

Graphic: CCO Class Details

Button: Download CCO Syllabus

Level - Intermediate

Course Length: 2-Days

Cost of CCO: $1,650 USD - Instructor-Led and Live Online

Cost of CCO: $1,295 USD - Online On-Demand

Button: Find a CCO class OR Button: Take CCO Online

Bundle pricing available for this course!

The Cellebrite Certified Operator (CCO) course is a 2-day intermediate level certification program which builds on the concepts from the CMFF course. This course is designed for those participants tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC. This course aims to teach data extraction team members such as technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and personnel designated to handle extraction of digital evidence how to perform extractions on a variety of devices. These extractions include logical, file system and physical extractions from mobile devices as well SIM cards, and external storage such as SD cards. Participants in this course will gain a basic understanding of how to open the extractions in Physical Analyzer software, conduct basic searches and how to create bookmarks and reports.

NOTE: It is strongly recommended that students attending this course complete the Cellebrite Mobile Forensics Fundamentals (CMFF) course or test out prior to attending.

The CCO course is comprised of the following modules and lessons:

1. Introduction

2. Forensic Handling of Mobile Devices

  • Recognize legal considerations for seizing and searching devices
  • Identify evidence handling procedures on scenes involving mobile devices
  • Use UFED Phone Detective to identify a specific mobile device
  • Recognize various locking mechanisms found on mobile devices
  • Practice applying best practices when seizing devices to a mock scenario

3. UFED Touch and UFED 4PC

  • Learn about the components for the UFED Touch and UFED 4PC
  • Learn how to license UFED technology
  • Learn to update the firmware
  • Install UFED 4PC
  • Configure UFED Touch and/or UFED 4PC

4. Cellebrite Extraction Methodology

  • Identify best practices for digital forensic extractions
  • Practice forensically sterilizing media
  • Complete SIM card extractions using UFED Touch/4PC
  • Conduct SD card extractions in a forensically sound manner
  • Use the UFED Touch/4PC and Physical Analyzer to conduct device extractions
  • Complete the removal of a passcode from a locked device using UFED Touch/4PC
  • Describe how to use UFED Camera Services

5. Introduction to Analyzing User Data

  • Basic Physical Analyzer Configuration
  • Open extractions with Physical Analyzer
  • View data in Physical Analyzer
  • Learn to bookmark items of interest

6. Reporting on Technical Findings

  • Understand the fundamental elements of a report
  • Understand reporting options within UFED Physical Analyzer
  • Create a report based on evidentiary items
Participants are offered an optional certification examination at the conclusion of class. Successful completion of the exam results in a Cellebrite Certified Operator (CCO) certification credential. Successful course completion without attempting or passing the optional exam and skill challenge results in a certificate of attendance.
Attaining the CCO certification credential, while optional, is a prerequisite for taking the Cellebrite Certified Mobile Examiner (CCME) test. Demonstration of mastery of these concepts is one of the prerequisites for students desiring to take the Cellebrite Certified Mobile Examiner (CCME) certification examination. Students considering the CCME certification credential are also required to complete the Cellebrite Mobile Forensic Fundamentals (CMFF) course or Cellebrite Mobile Forensic Fundamentals (CMFF) Test Out Option and the Cellebrite Certified Physical Analyst (CCPA) course.

Button: Find a CCO class OR Button: Take CCO Online


Last modified: Friday, 29 September 2017, 9:45 AM