Cellebrite Certified Physical Analyst (CCPA) Course - Advanced

Graphic: CCPA Class


Level - Advanced

Course Length: 3-Days

Button: Find a CCPA class Button: Take CCPA Online

Button: CCPA Live Online

Bundle pricing available for this course!

The Cellebrite Certified Physical Analyst (CCPA) course is a 3-day advanced level program designed for technically savvy investigators, digital evidence analysts and forensic practitioners. As this course focuses on the analysis and advanced search techniques using UFED Physical Analyzer, participants will not be conducting extractions from devices in this course. UFED Physical Analyzer software will be used extensively to explore recovered deleted data, database contents, advanced search and analysis techniques, verification and validation, and reporting.

NOTE: It is strongly recommended that students attending this course complete the Cellebrite Mobile Forensics Fundamentals (CMFF) course or test out, as well as the Cellebrite Certified Operator (CCO) course prior to attending.

The CCPA course is comprised of the following modules and lessons:

1. Introduction

2. UFED Physical Analyzer Overview

      • Install Physical Analyzer
      • Install the Translation Package
      • Understand licensing options
      • Configure Physical Analyzer
      • Open extractions with Physical Analyzer
      • View data in Physical Analyzer

3. Android Overview and Analysis

      • History of Android
      • Understand the popularity of Android
      • Android hardware
      • Android OS and file system
      • Key aspects of Android security
      • Understanding the value of Android to investigators

4. iOS Overview and Analysis

      • History of Apple iOS
      • Understand the popularity of Apple iOS
      • Apple hardware
      • Apple iOS and file system
      • Key aspects of Apple iOS security
      • Understanding the value of Apple iOS to investigators

5. Advanced Functions

      • Using the Open > Advanced function
      • Analyzing location information
      • Using the translation function
      • Wear Leveling and Garbage Collection
      • Conducting a byte search and manually bookmark data
      • Conducting searches for 7-Bit
      • Using RegEx (regular expression) searches

6. Verification and Validation

      • Conduct verification and validation of data decoded within the Physical Analyzer tool

7. Plug-Ins and Chain Manager

      • Learn about the Plug-in Chain Manager and its capabilities
      • Demonstrate your ability to use the Plug-in Chain Manager

8. Reporting of Technical Findings

      • Understand reporting options within UFED Physical Analyzer
      • Create a report based on evidentiary items
Participants are offered an optional written examination and a practical skills test at class conclusion. Successful class completion without attempting or passing the optional examination and skills test results in a Cellebrite Physical Analyst Certificate of Completion.
Successful completion of the Cellebrite Certified Physical Analyst (CCPA) examination and practical skills test results in a Cellebrite Certified Physical Analyst Certification credential. Demonstration of mastery of these concepts is one of the prerequisites for students desiring to take the Cellebrite Certified Mobile Examiner (CCME) certification examination. Students considering the CCME Certification credential are also required to successfully complete the Cellebrite Mobile Forensic Fundamentals (CMFF) course or Cellebrite Mobile Forensic Fundamentals (CMFF) Test Out Option and the Cellebrite Certified Operator (CCO) course.
Button: Find a CCPA classButton: Take CCPA Online
Last modified: Friday, January 11, 2019, 11:06 AM