CMFF + CCO

Description

The Cellebrite Mobile Forensics Fundamentals (CMFF) course no longer represents an introduction to forensics, often referred to as the basics. Rapid evolutions in technology and the increasing variety of mobile communication devices and Internet of Things appliance demand more from persons engaged in digital forensics.

The CMFF curriculum provides attendees with compulsory digital forensics core knowledge (fundamentals) including: mobile device communication networks, explorations of Android and iOS file systems, extraction methodologies, memory (NAND) functions, and the proper handling of digital evidence for use in administrative, civil, or criminal actions.

Moreover, attendees will learn the reasoning and strategies (concepts) used by creditable practitioners and organizations to form the future of digital forensic best practices. Although Cellebrite products are used in CMFF, the course is not a single tool or application centric program. Cellebrite believes a responsibility exists to teach members of the digital forensic community the necessary competencies to conduct exams ethically, using universal professional standards.

The Cellebrite Certified Operator (CCO) course is a 2-day intermediate level certification program which builds on the concepts from the CMFF course. This course is designed for those participants tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC. This course aims to teach data extraction team members such as technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and personnel designated to handle the extraction of digital evidence how to perform extractions on a variety of devices.

CMFF Course Objectives

Upon successful completion of this course, the student will be able to:

• Identify mobile device hardware
• Discuss how devices communicate
• Describe the four phases of the digital forensic process
• Describe the importance of evidence handling and documentation
• Describe the tools and techniques for acquiring data from mobile devices
• Define the types of data encoding used on mobile devices.

CCO Course Objectives

Upon successful completion of this course, the student will be able to:

• Install and configure UFED Touch, UFED Touch 2 or UFED 4PC and Physical Analyzer software.
• Explain the best practices for the on-scene identification, collection, packaging, transporting, examination and storage of digital evidence data and devices.
• Display best practice when conducting cell phone extractions.
• Identify functions used within UFED Touch, UFED Touch 2 or UFED 4PC to perform supported data extractions.
• Exhibit how to open extractions using Physical Analyzer.
• Summarize how to conduct basic searches using Cellebrite Physical Analyzer.
• Outline how to create reports using Cellebrite Physical Analyzer.
• Demonstrate proficiency of the above learning objectives by passing a knowledge test and practical skills assessment with a score or 80% or better.

Datasheets

Video

Categories