Cellebrite Certified Physical Analyst (CCPA)

Description

The Cellebrite Certified Physical Analyst (CCPA) course is a 3-day advanced level program designed for technically savvy investigators, digital evidence analysts and forensic practitioners. As this course focuses on the analysis and advanced search techniques using Physical Analyzer, participants will not be conducting extractions from devices in this course. Physical Analyzer software will be used extensively to explore recovered deleted data, database contents, advanced search and analysis techniques, verification and validation, and reporting.

NOTE: It is strongly recommended that students attending this course complete the Cellebrite Mobile Forensics Fundamentals (CMFF) course or test out, as well as the Cellebrite Certified Operator (CCO) course prior to attending.

Course Content:

Physical Analyzer Overview

• Install Physical Analyzer
• Install the Translation Package
• Understand licensing options
• Configure Physical Analyzer
• Open extractions with Physical Analyzer
• View data in Physical Analyzer.

iOS Overview and Analysis

• History of Apple iOS
• Understand the popularity of Apple iOS
• Apple hardware
• Apple iOS and file system
• Key aspects of Apple iOS security
• Understand the value of Apple iOS to investigators.

Android Overview and Analysis

• History of Android
• Understand the popularity of Android
• Android hardware
• Android OS and file system
• Key aspects of Android security
• Understand the value of Android in investigations.

Advanced Functions

• Using the Open > Advanced function
• Analyze location information
• Using the translation function
• Wear Leveling and Garbage Collection
• Conduct a byte search and manually bookmark data
• Conduct searches for 7-Bit
• Use RegEx searches.

Additional Functions

• Verify and Validate of data decoded
• Plug-ins and Chain Manager
• Report on Technical Findings.

View CCPA Course Details

Find a CCPA Class

Datasheets

Video

Categories