In-System Programming (ISP) Forensic Training

shield

5 days
Advanced-level course

The In-System Programming Extraction (CAIE) training is an advanced level five-day course lead by Cellebrite Certified Instructors (CCIs). During this course, participants will learn about the In-System Programming (ISP) process using the precision soldering techniques, eMMC/eMCP theory, methodologies, and purpose as well as understand the equipment and accessories necessary for performing direct eMMC/eMCP (ISP) extractions without the need for chip-off and destroying the mobile device.

NEW! Unique custom-made Advanced Solutions Kits for various extraction methods. Advanced Solution Kits are available as a stand-alone "solution kit only" purchase or as a bundle with this course. To learn more, or to purchase this course with an accompanying solution kit visit our page About Advanced Solution Kits




Course Content

sidebar image 
Mobile Device Technology Overview
  • Proper Identification of Mobile Devices
  • Overview of How Mobile Devices Communicate
  • Artifacts of Interest
  • Information Potentially Available from Providers
sidebar image 
Flash Memory
  • Practical implications of ISP a mobile device
  • Method
  • JTAG vs. ISP
  • Safety Concerns
  • Encryption
sidebar image 
Electrical Theory and Power
  • Mobile Device Power
  • Basic Elecronics
  • Powering eMMC/eMCP chip for ISP
  • Using DC Power Supply
sidebar image 
Soldering Technique
  • Solder the enamed wire onto the circut board
  • Purpose
  • Safety
  • Techniques
sidebar image 
Reference and Research
  • How to determine if ISP process is the best option.
  • ISP pinouts
  • Support or unsupport ISP process
sidebar image 
Tools and Equipment
  • Equipment needed to safely prepare a mobile device for ISP
  • Equipment needed to safely remove the chip
  • Items needed for post processing
  • Basic soldering/cleaning
  • Preparing the board for soldering
  • Testing Connectivity
sidebar image 
Forensic Process
  • Best practice for ISP process
  • Hashing
  • Validation
sidebar image 
Cell Phone Disassembly
  • Sealed devices
  • Battery precautions
  • Parts
  • Removing the motherboard
sidebar image 
eMMC/eMCP Chip Removal
  • Heat Gun Methods
  • Chip Removal
  • Cleaning
  • Locate the ISP Pinout using multimeter
  • Preparing to read
sidebar image 
RIFF Box and Z3X Box Software
  • Install RIFF Box and Z3X Box software
  • Discuss various options within the software
  • Add on accessories
sidebar image 
Z3X Pro Imaging
  • Using the MOORC kit
  • Z3X Pro Software
  • Direct-Solder onto a eMMC/eMCP chip
sidebar image 
Introduction to Physical Analyzer
  • PA Advanced Open
  • PA Chaining for flash memory
  • Preparing a report of results
  • Practicalstart with a device which must have the chip removed to process the data.
Last modified: Monday, December 16, 2019, 3:39 PM