Cellebrite UFED Field Operator (CUFO) Course

shield 

1 days
Entry-level course

The Cellebrite UFED Field Operators (CUFO) Course is designed for examiners with little exposure to or experience in mobile device forensics. This 1-day course focuses on the use of Cellebrite Responder (Kiosk) to perform logical extractions, password bypasses and the analysis of evidentiary items using the Cellebrite Responder software.

Successful completion of the Cellebrite UFED Field Operators (CUFO) examination results in a Cellebrite Certified Field Operators Certification credential. If a student does not pass the exam, a Certificate of Attendance will be awarded.


Course Content

sidebar image 
Mobile Phone Technology
  • Identify mobile device hardware
  • Describe how devices communicate
sidebar image 
Data Storage Locations
  • Storage on mobile devices
  • Storage on SIM cards
  • Storage on SD cards
sidebar image 
Responder (Kiosk) Overview
  • Hardware overview
  • Responder process
  • Extraction overview
sidebar image 
Forensic Handling of Mobile Devices
  • Importance of mobile devices
  • Legal authority
  • Technologies
  • Concealment
  • Isolation and shielding of mobile devices
  • Model identification, IMEI, web resources, and software
  • Device state consideration and collection procedures
  • Chain of custody, documentation, transport, and storage
sidebar image 
Responder (Kiosk) SIM Extractions
  • SIM identification and types
  • Data extraction
  • Radio isolation cards
sidebar image 
Responder (Kiosk) Device Extractions
  • Responder (Kiosk) device identification methods
  • UFED camera
  • Password/PIN extraction and removal
  • Logical extraction of mobile data
  • Configuration changes
sidebar image 
Viewing Data on Responder (Kiosk)
  • Data display
  • Bookmarking data
  • Applying filters
  • Creating reports
  • Saving extraction data
sidebar image 
Responder (Kiosk) SD Card Extraction
  • SD and storage card types
  • SD card extraction with Responder (Kiosk)
  • Use of write-blocker
Last modified: Thursday, August 13, 2020, 2:51 PM