Cellebrite Responder Operator (CRO)

Focuses on the use of Cellebrite’s UFED Kiosk to perform logical extractions, password bypasses and more using the Cellebrite Responder software.

Category:

Description

Cellebrite Responder Operator (CRO) is a one (1) day entry level course designed for the entry level, non-technical Cellebrite Responder Kiosk, or software user. The CRO course includes lessons and practical exercises necessary to explain the fundamentals of mobile device investigations, extraction of user data, and the previewing of extracted mobile device data using the Cellebrite Responder Kiosk. Participants in the Cellebrite Responder Operator (CRO) course perform extractions to collect data from mobile devices, SIM cards, and mass storage media. Additionally, learner’s complete proper documentation steps, the generation of automated reports, and the creation of custom reports.

 

 

Course Content:

 

Mobile Phone Technology

  • Identify mobile device hardware
  • Describe how devices communicate.

 

Data Storage Locations

  • Storage on mobile devices
  • Storage on SIM cards
  • Storage on SD cards.

 

Responder (Kiosk) Overview

  • Hardware overview
  • Responder process
  • Extraction overview.

 

Forensic Handling of Mobile Devices

  • Importance of mobile devices
  • Legal authority
  • Technologies
  • Concealment
  • Isolation and shielding of mobile devices
  • Model identification, IMEI, web resources, and software
  • Device state consideration and collection procedures
  • Chain of custody, documentation, transport, and storage.

 

Responder (Kiosk) SIM Extractions

  • SIM identification and types
  • Data extraction
  • Radio isolation cards.

 

Responder (Kiosk) Device Extractions

  • Responder (Kiosk) device identification methods
  • UFED camera
  • Password/PIN extraction and removal
  • Logical extraction of mobile data
  • Configuration changes.

 

Viewing Data on Responder (Kiosk)

  • Data display
  • Bookmarking data
  • Applying filters
  • Creating reports
  • Saving extraction data.

 

Responder (Kiosk) SD Card Extraction

  • SD and storage card types
  • SD card extraction with Responder (Kiosk)
  • Use of write-blocker.

 

 

View CRO Course Details

 

Find a CRO Class

Datasheets

  • Datasheet 1

Video