This course takes a hands-on approach to provide students with foundational concepts and practical skills in mobile device forensics, which can be leveraged to perform forensically sound investigations against crimes involving the most complex mobile devices available. Using modern tools and techniques, students will learn how to conduct a structured investigation process to determine the nature of the crime and to produce results that are useful in criminal or civil proceedings.
The course will provide a basic walk-through on various phases of the mobile forensics process for both Android and iOS based devices including forensically extracting, collecting, and analyzing data as well as producing and disseminating reports. The course goes over all the terminology involved with mobile devices.
Gain knowledge on smart devices
Understand the mobile device forensic process
Know and recognize the legality of mobile device forensics
Gain required knowledge to understand the terminology around mobile devices
Understand what data can or cannot be retrieved from mobile devices
Students will receive a manual during class that will contain the class content and worksheets. This class location will require the student to supply their own laptop for the training.
Course Outline Day 1
PDA (Personal Data Assistant)
GPS (Global Positioning System)
Personal Information on Mobile Devices
Text and Short Messaging Service (SMS)
Instant Messaging Applications
What is Mobile Device Forensics?
How to preserve
Computer vs Mobile
Data that can be extracted
Sources of Data
External storage (SD Card)
Subsciber Identity Module (SIM)
Android (Google Play Store)
iOS – Non Jailbroken (Apple Store)
iOS – Jailbroken (Cydia Store)
Course Outline Day 2
Mobile Forensic Process
Building a forensics team
Standard Operating Procedure
Process and Procedures
Seizure and Isolation
Chain of Custody
Tools to assist
Impact on Mobile Forensics
Intro to Drones (UAV)
Consists of 20 questions
Evaluation Procedures and Grading Criteria
The evaluation will be assured through an overall exam at the end of the course. The participants of this training course will receive a certificate as an Oxygen Forensic Basic Investigator (OFBI) after passing the exam.
Students cannot miss more than 1 hour of class to receive a certificate of attendance.