Cellebrite UFED Field Operator (CUFO) Course
1 days
Entry-level course
The Cellebrite UFED Field Operators (CUFO) Course is designed for examiners with little exposure to or experience in mobile device forensics. This 1-day course focuses on the use of Cellebrite’s UFED Kiosk to perform logical extractions, password bypasses and the analysis of evidentiary items using the UFED InField software.
NOTICE: This course is for UFED InField Software and Kiosk-based solutions only. It is not training in our Pro Series Forensic Core classes that use UFED Touch, UFED4PC and our Logical/Physical Analyzer Software.
Successful completion of the Cellebrite UFED Field Operators (CUFO) examination results in a Cellebrite Certified Field Operators Certification credential. If a student does not pass the exam, a Certificate of Attendance will be awarded.
Note: There is an additional half day Cellebrite UFED Field Managers (CUFM) Course available to take in conjunction with this course.
Course Content
Mobile Phone Technology
- Identify mobile device hardware
- Describe how devices communicate
Data Storage Locations
- Storage on mobile devices
- Storage on SIM cards
- Storage on SD cards
UFED Kiosk Overview
- Hardware overview
- Kiosk process
- Extraction overview
Forensic Handling of Mobile Devices
- Importance of mobile devices
- Legal authority
- Technologies
- Concealment
- Isolation and shielding of mobile devices
- Model identification, IMEI, web resources, and software
- Device state consideration and collection procedures
- Chain of custody, documentation, transport, and storage
Kiosk SIM Extractions
- SIM identification and types
- Data extraction
- Radio isolation cards
Kiosk Device Extractions
- Kiosk device identification methods
- UFED camera
- Password/PIN extraction and removal
- Logical extraction of mobile data
- Configuration changes
Viewing Data on Kiosk
- Data display
- Bookmarking data
- Applying filters
- Creating reports
- Saving extraction data
Kiosk SD Card Extraction
- SD and storage card types
- SD card extraction with Kiosk
- Use of write-blocker
Last modified: Tuesday, December 17, 2019, 7:15 AM