Cellebrite Certified Operator (CCO)
Designed for those participants tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC.
Related products
Description
The Cellebrite Certified Operator (CCO) course is a 2-day intermediate level certification program which builds on the CMFF course concepts. This course is designed for participants tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC.
It aims to teach data extraction on a variety of devices to personnel including technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and other staff members designated to handle extraction of digital evidence.
Course Content:
Mobile Device Technology Overview
- Identify mobile device hardware and operating systems.
- Discuss how mobile devices communicate.
- Discuss how technology affects network capacity.
- Learn how devices and subscribers are identified on networks.
UFED Touch and UFED 4PC
- Learn about the components for the UFED Touch and UFED 4PC
- Learn how to license UFED technology
- Learn to update the firmware
- Install UFED 4PC
- Configure UFED Touch and/or UFED 4PC.
Introduction to Analyzing User Data
- Basic Physical Analyzer Configuration
- Open extractions with Physical Analyzer
- View data in Physical Analyzer
- Learn to bookmark items of interest.
Forensic Handling of Mobile Devices
- Recognize legal considerations for seizing and searching devices
- Identify evidence handling procedures on scenes involving mobile devices
- Use UFED Phone Detective to identify a specific mobile device
- Recognize various locking mechanisms found on mobile devices
- Practice applying best practices when seizing devices to a mock scenario.
Cellebrite Extraction Methodology
- Identify best practices for digital forensic extractions
- Practice forensically sterilizing media
- Complete SIM card extractions using UFED Touch/4PC
- Conduct SD card extractions in a forensically sound manner
- Use the UFED Touch/4PC and Physical Analyzer to conduct device extractions
- Complete the removal of a passcode from a locked device using UFED Touch/4PC
- Describe how to use UFED Camera Services.
Reporting on Technical Findings
- Understand the fundamental elements of a report
- Understand reporting options within Physical Analyzer
- Create a report based on evidentiary items.
Video
Categories
Partners: Cellebrite
Available Training: Online – Instructor Led | Client Site – Instructor Led | Online – Self Paced | Vendor Site – Instructor Led