Investigator Track

Designed for non-forensic users who routinely need to gather evidence from mobile devices or cloud data sources

This track familiarizes investigators with digital forensics technology and explores social media and cloud investigation issues. Participants will learn how to extract an active mobile phone and identify a network of undercover contacts for immediate use in the field. You will also learn how to utilize basic analytical tools to better interface with, search and identify digital forensic artifacts and become a “force multiplier” for your agency.

Required Courses

CMFFThe Cellebrite Mobile Forensics Fundamentals (CMFF) course is a one day entry level program designed for investigators to identify mobile device hardware and understand the general the forensic process. Students will learn how the four phases of the forensics process are related and demonstrate how to handle devices following best practices. Students will also conduct basic analysis of extracted device data and generate reports using UFED Reader software.

This is the starting point for first responders, investigators and CSI staff tasked with identifying and seizing mobile devices for data acquisition, it does not include conducting extractions.  The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam. Students achieve the CMFF certificate of completion upon passing an examination with a score of 80% or better.  The CMFF course (or test out) is the first requirement to qualify for the Cellebrite Certified Mobile Examiner (CCME) certification exam.  Learn More

Delivery Mode

All Training Methods

INVESTIGATORS MUST TAKE AT LEAST ONE OF THE FOLLOWING CLASSES TO COMPLETE THIS ACADEMY TRACK:

CUFOThe Cellebrite UFED Field Operator (CUFO) course is a one day program designed for non-technical examiners. This course exposes students to the fundamentals of mobile device investigations, extraction of user data, and analysis of mobile devices using the UFED Kiosk. Operation of the Cellebrite UFED Kiosk product to perform a number of hands-on logical extractions on various mobile devices with a variety of operating systems is a key component of this class. Skill sets also include creating Safety SIMs and extracting evidentiary data from SIM cards. Participants also create reports on extracted data. It should be noted that times allocated to course content do not include course introduction or examination time.  Learn More

Delivery Mode

Instructor Led and On-Demand Training

CCO BadgeThe Cellebrite Certified Operator (CCO) course is a two day intermediate level certification program which builds on the concepts from the CMFF course and is designed for those participants who are tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC.

This course is designed to teach data extraction team members such as technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and personnel designated to handle extraction of digital evidence how to perform extractions on a variety of devices. These extractions include logical, file system and physical extractions from mobile devices as well SIM cards, and external storage such as SD cards.

Participants in this course will gain a basic understanding of how to open the extractions in Physical Analyzer software, conduct basic searches and how to create bookmarks and reports. Students achieve the CCO certification upon passing a knowledge test and practical skills assessment with a score of 80% or better. The only way to earn this CCO certification is by taking the exam along with an associated course, there is no test out available.  Learn More

Delivery Mode

Instructor Led and On-Demand Training

The UFED Reader course is a one day class delivered on site and is designed to familiarize the non-technical investigator and legal professional with the simple and free UFED Reader Technology that enables investigators to receive UFED reports from the forensic lab and complete their on searches, tagging and selective reporting for specific purpose. The UFED Reader can be distributed with every UFED report and can become a force multiplier in environments where there are substantial backlogs or in cases where the investigator is most familiar with the evidence they are looking for and need to complete searches and investigative review on their own. UFED Reader is now being widely used by legal professionals who consume forensic UFED reports in the course of litigation.  Learn More

Delivery Mode

Instructor Led Training

PLUS ONE ELECTIVE BELOW

CLEARCellebrite’s Cloud Extraction and Reporting (CLEAR) course is designed for examiners tasked with cloud based and/or social media investigations. This one day course focuses on the use of Cellebrite’s Cloud Analyzer software to perform data extractions, analysis, and reporting of supported cloud based repositories of data.  Learn More

 

 

Delivery Mode

All Training Methods

CSNIThe Cellebrite Social Network Investigations (CSNI) course is a four day program designed for technically savvy investigators, digital evidence analysts and forensic practitioners. This course provides students with an introduction to social media investigations to include pre-seizure actions and basic investigative techniques. Students will learn how to create undercover accounts and use open source intelligence to gather information from publicly available information from social networks such as Facebook, Twitter, Periscope, and more.

Using a real life application and comprehensive instruction on legal processes (subpoenas, orders and warrants), students will learn how to identify and contact suspects. To complete the workflow, students will learn how to properly seize devices for extraction and how to work with the data that is returned from forensic examinations. Students will also learn methods to de-conflict their cases from other law enforcement officers. As the course progresses, students will be exposed to tools and techniques to collect social media evidence from devices and cloud data sources (UFED Touch and Cloud Analyzer). Students will earn a CSNI certificate documenting successful completion of a knowledge exam with a score of 80% or better.  Learn More

Delivery Mode

Instructor Led Training

Search