Cellebrite UFED Field Operator (CUFO) Course

1 days
Entry-level course
The Cellebrite UFED Field Operators (CUFO) Course is designed for examiners with little exposure to or experience in mobile device forensics. This 1-day course focuses on the use of Cellebrite Responder (Kiosk) to perform logical extractions, password bypasses and the analysis of evidentiary items using the Cellebrite Responder software.
Successful completion of the Cellebrite UFED Field Operators (CUFO) examination results in a Cellebrite Certified Field Operators Certification credential. If a student does not pass the exam, a Certificate of Attendance will be awarded.
Course Content

Mobile Phone Technology
- Identify mobile device hardware
- Describe how devices communicate

Data Storage Locations
- Storage on mobile devices
- Storage on SIM cards
- Storage on SD cards

Responder (Kiosk) Overview
- Hardware overview
- Responder process
- Extraction overview

Forensic Handling of Mobile Devices
- Importance of mobile devices
- Legal authority
- Technologies
- Concealment
- Isolation and shielding of mobile devices
- Model identification, IMEI, web resources, and software
- Device state consideration and collection procedures
- Chain of custody, documentation, transport, and storage

Responder (Kiosk) SIM Extractions
- SIM identification and types
- Data extraction
- Radio isolation cards

Responder (Kiosk) Device Extractions
- Responder (Kiosk) device identification methods
- UFED camera
- Password/PIN extraction and removal
- Logical extraction of mobile data
- Configuration changes

Viewing Data on Responder (Kiosk)
- Data display
- Bookmarking data
- Applying filters
- Creating reports
- Saving extraction data

Responder (Kiosk) SD Card Extraction
- SD and storage card types
- SD card extraction with Responder (Kiosk)
- Use of write-blocker
Last modified: Thursday, August 13, 2020, 2:51 PM