Cellebrite Learning Center

Level - Beginner
Course Length - 1 Day
Delivery Mode - Instructor Led Training

CLICK HERE TO VIEW INSTRUCTOR LED CLASSES

NOTICE: This course is for UFED InField Software and Kiosk-based solutions only. It is not training in our Pro Series Forensic Core classes that use UFED Touch, UFED4PC and our Logical/Physical Analyzer Software.

The Cellebrite UFED Field Operators (CUFO) Course is designed for examiners with little exposure to or experience in mobile device forensics. This 1-day course focuses on the use of Cellebrite’s UFED Kiosk to perform logical extractions, password bypasses and the analysis of evidentiary items using the UFED InField software.

The CUFO course competencies include:

Mobile Phone Technology

• Identify mobile device hardware
• Describe how devices communicate

Data Storage Locations

• Storage on mobile devices
• Storage on SIM cards
• Storage on SD cards

UFED Kiosk Overview

• Hardware overview
• Kiosk process
• Extraction overview

Forensic Handling of Mobile Devices

• Importance of mobile devices
• Legal authority
• Technologies
• Concealment
• Isolation and shielding of mobile devices
• Model identification, IMEI, web resources, and software
• Device state consideration and collection procedures
• Chain of custody, documentation, transport, and storage

Kiosk SIM Extractions

• SIM identification and types
• Data extraction
• Radio isolation cards

Kiosk Device Extractions

• Kiosk device identification methods
• UFED camera
• Password/PIN extraction and removal
• Logical extraction of mobile data
• Configuration changes

Viewing Data on Kiosk

• Data display
• Bookmarking data
• Applying filters
• Creating reports
• Saving extraction data

Kiosk SD Card Extraction

• SD and storage card types
• SD card extraction with Kiosk
• Use of write-blocker

Click here to download the complete syllabus

CERTIFICATES

Successful completion of the Cellebrite UFED Field Operators (CUFO) examination results in a Cellebrite Certified Field Operators Certification credential. If a student does not pass the exam, a Certificate of Attendance will be awarded.

Note: There is an additional half day Cellebrite UFED Field Managers (CUFM) Course available to take in conjunction with this course.