Cellebrite UFED Field Operator (CUFO) Course


Image: CUFO Class

Level - Beginner

Course Length: 1 Day


The Cellebrite UFED Field Operators (CUFO) Course is designed for examiners with little exposure to or experience in mobile device forensics. This 1-day course focuses on the use of Cellebrite’s UFED Kiosk to perform logical extractions, password bypasses and the analysis of evidentiary items using the UFED InField software.



NOTICE: This course is for UFED InField Software and Kiosk-based solutions only. It is not training in our Pro Series Forensic Core classes that use UFED Touch, UFED4PC and our Logical/Physical Analyzer Software.


The CUFO course competencies include:

Mobile Phone Technology

  • Identify mobile device hardware
  • Describe how devices communicate

Data Storage Locations

  • Storage on mobile devices
  • Storage on SIM cards
  • Storage on SD cards

UFED Kiosk Overview

  • Hardware overview
  • Kiosk process
  • Extraction overview

Forensic Handling of Mobile Devices

  • Importance of mobile devices
  • Legal authority
  • Technologies
  • Concealment
  • Isolation and shielding of mobile devices
  • Model identification, IMEI, web resources, and software
  • Device state consideration and collection procedures
  • Chain of custody, documentation, transport, and storage

Kiosk SIM Extractions

  • SIM identification and types
  • Data extraction
  • Radio isolation cards

Kiosk Device Extractions

  • Kiosk device identification methods
  • UFED camera
  • Password/PIN extraction and removal
  • Logical extraction of mobile data
  • Configuration changes

Viewing Data on Kiosk

  • Data display
  • Bookmarking data
  • Applying filters
  • Creating reports
  • Saving extraction data

Kiosk SD Card Extraction

  • SD and storage card types
  • SD card extraction with Kiosk
  • Use of write-blocker


CERTIFICATES

Successful completion of the Cellebrite UFED Field Operators (CUFO) examination results in a Cellebrite Certified Field Operators Certification credential. If a student does not pass the exam, a Certificate of Attendance will be awarded.

Note: There is an additional half day Cellebrite UFED Field Managers (CUFM) Course available to take in conjunction with this course.

Last modified: Monday, July 15, 2019, 10:54 AM