Course content covers the technologies required to extract a broad base of digital evidence, as well as the methods for establishing connections and building timelines from service provider Call Detail Records (CDR) and all forms of mobile digital data. This track also builds analytical proficiencies, exploring current solutions and best-practice approaches for extracting, analyzing, storing, reporting and sharing digital forensics evidence.
This is the starting point for first responders, investigators and CSI staff tasked with identifying and seizing mobile devices for data acquisition, it does not include conducting extractions. The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam. Students achieve the CMFF certificate of completion upon passing an examination with a score of 80% or better. The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam. Learn More
This course is designed to teach data extraction team members such as technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and personnel designated to handle extraction of digital evidence how to perform extractions on a variety of devices. These extractions include logical, file system and physical extractions from mobile devices as well SIM cards, and external storage such as SD cards.
Participants in this course will gain a basic understanding of how to open the extractions in Physical Analyzer software, conduct basic searches and how to create bookmarks and reports. Students achieve the CCO certification upon passing a knowledge test and practical skills assessment with a score of 80% or better. The only way to earn this CCO certification is by taking the exam along with an associated course, there is no test out available. Learn More
Students will achieve the CCPA certification if they take and pass a knowledge test and practical skills assessment with a score of 80% or better. The only way to earn the CCPA certification is by taking the exam along with an associated course, there is no test out available. Learn More
It is strongly recommended that students in this course complete the Cellebrite Mobile Forensics Fundamentals (CMFF) course or test out, as well as the Cellebrite Certified Operator (CCO) course prior to attending.
PLUS ONE ELECTIVE BELOW
Using a real life application and comprehensive instruction on legal processes (subpoenas, orders and warrants), students will learn how to identify and contact suspects. To complete the workflow, students will learn how to properly seize devices for extraction and how to work with the data that is returned from forensic examinations. Students will also learn methods to de-conflict their cases from other law enforcement officers. As the course progresses, students will be exposed to tools and techniques to collect social media evidence from devices and cloud data sources (UFED Touch and Cloud Analyzer). Students will earn a CSNI certificate documenting successful completion of a knowledge exam with a score of 80% or better. Learn More