ANALYST TRACK

Designed specifically for Analysts assigned to support investigative and intelligence units

Course content covers the technologies required to extract a broad base of digital evidence, as well as the methods for establishing connections and building timelines from service provider Call Detail Records (CDR) and all forms of mobile digital data. This track also builds analytical proficiencies, exploring current solutions and best-practice approaches for extracting, analyzing, storing, reporting and sharing digital forensics evidence.

Required Courses

CMFFThe Cellebrite Mobile Forensics Fundamentals (CMFF) course is a one day entry level program designed for investigators to identify mobile device hardware and understand the general the forensic process. Students will learn how the four phases of the forensics process are related and demonstrate how to handle devices following best practices. Students will also conduct basic analysis of extracted device data and generate reports using UFED Reader software.

This is the starting point for first responders, investigators and CSI staff tasked with identifying and seizing mobile devices for data acquisition, it does not include conducting extractions.  The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam. Students achieve the CMFF certificate of completion upon passing an examination with a score of 80% or better.  The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam. Learn More

Delivery Mode

All Training Methods

CCO BadgeThe Cellebrite Certified Operator (CCO) course is a two day intermediate level certification program which builds on the concepts from the CMFF course and is designed for those participants who are tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC.

This course is designed to teach data extraction team members such as technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and personnel designated to handle extraction of digital evidence how to perform extractions on a variety of devices. These extractions include logical, file system and physical extractions from mobile devices as well SIM cards, and external storage such as SD cards.

Participants in this course will gain a basic understanding of how to open the extractions in Physical Analyzer software, conduct basic searches and how to create bookmarks and reports. Students achieve the CCO certification upon passing a knowledge test and practical skills assessment with a score of 80% or better. The only way to earn this CCO certification is by taking the exam along with an associated course, there is no test out available. Learn More

Delivery Mode

Instructor Led and On-Demand Training

CCPA BadgeThe Cellebrite Certified Physical Analyst (CCPA) course is a three day advanced level program designed for technically savvy investigators, digital evidence analysts and forensic practitioners. As this course focuses on the analysis and advanced search techniques using UFED Physical Analyzer, participants will NOT be conducting extractions from devices in this course. UFED Physical Analyzer software will be used extensively to explore recovered deleted data, database contents, advanced search and analysis techniques, verification and validation, and reporting.

Students will achieve the CCPA certification if they take and pass a knowledge test and practical skills assessment with a score of 80% or better. The only way to earn the CCPA certification is by taking the exam along with an associated course, there is no test out available. Learn More

It is strongly recommended that students in this course complete the Cellebrite Mobile Forensics Fundamentals (CMFF) course or test out, as well as the Cellebrite Certified Operator (CCO) course prior to attending.

Delivery Mode

All Training Methods

UAThe UFED Analytics Bootcamp is a two day course designed to familiarize end users with critical functions that can be performed in the UFED Analytics tools. This workflow driven approach to training allows users to jump right in and ingest and process data sets, work on previously processed data and perform complex analytical tasks from the very first hours of this two-day class. The focus is on searching, establishing linkage of devices and users, visualization of links, and image analytics as well as using filters on big data sets to get to the relevant data fast. The UFED Analytics class is based on either the Desktop or Workgroup/Enterprise level software depending on the user’s needs.  Learn More

 

Delivery Mode

Instructor Led Training

PLUS ONE ELECTIVE BELOW

Cellebrite’s Cloud Extraction and Reporting (CLEAR) Course is designed for examiners tasked with cloud based and/or social media investigations. This one day course focuses on the use of Cellebrite’s Cloud Analyzer software to perform data extractions, analysis, and reporting of supported cloud based repositories of data. Learn More

 

 

Delivery Mode

Instructor Led and On-Demand Training

The Cellebrite Social Network Investigations (CSNI) course is a four day program designed for technically savvy investigators, digital evidence analysts and forensic practitioners. This course provides students with an introduction to social media investigations to include pre-seizure actions and basic investigative techniques. Students will learn how to create undercover accounts and use open source intelligence to gather information from publicly available information from social networks such as Facebook, Twitter, Periscope, and more.

Using a real life application and comprehensive instruction on legal processes (subpoenas, orders and warrants), students will learn how to identify and contact suspects. To complete the workflow, students will learn how to properly seize devices for extraction and how to work with the data that is returned from forensic examinations. Students will also learn methods to de-conflict their cases from other law enforcement officers. As the course progresses, students will be exposed to tools and techniques to collect social media evidence from devices and cloud data sources (UFED Touch and Cloud Analyzer). Students will earn a CSNI certificate documenting successful completion of a knowledge exam with a score of 80% or better.  Learn More

Delivery Mode

Instructor Led Training

Search