Introduction
This course is designed for forensic investigation professionals and deals with Mobile forensics. The course assumes a prerequisite knowledge of computer security and digital data structures as well as the legal aspects of admissibility of evidence in court. It covers the essentials of Mobile File Structures, Data Extraction, Analysis and Reporting. This course will teach investigators the tools and techniques to perform Mobile Data Extraction, Mobile Data Analysis and Evidence Reporting on different mobile devices.
Course Objectives for Mobile Forensics Expert
This training will focus on:
-
The essentials of Mobile File Structures, Data Extraction.
-
Analysis and Reporting For data extraction.
-
Understanding of the tools and techniques to perform Mobile Data Extraction, Mobile Data Analysis.
-
Evidence Reporting on different mobile devices.
Target Audience for Mobile Forensics Expert
This course is designed for:
-
Ethical Hacking Expert.
-
Digital Forensics Investigators.
-
Information Security Professionals.
-
Risk Assessments Professionals.
-
Mobile Developers.
-
anyone who deals with implementation, testing, security hardening of mobile devices.
Prerequisites for Mobile Forensics Expert
The course assumes a prerequisite knowledge of computer security and digital data structures as well as the legal aspects of admissibility of evidence in court.
Course Outlines for Mobile Forensics Expert
Day 1
Forensic Acquisition of Smartphones
-
Logical Acquisition
-
File System Acquisition
-
Physical Acquisition
-
Advanced Methods
Android Forensics
-
Android Architecture
-
Android Components
-
NAND Flash Memory in Android Devices
-
Android File System Overview
Day 2
Android File System Structures
-
Data Structure Layout
-
Physical
-
File system
-
Logical
-
Data Storage Formats
-
Physical and Logical Keyword Searches
Retrieving User Activity Information from Android Devices
-
Android Applications
-
Data Structures on Android Smartphones
-
SMS / MMS
-
Calls, Contacts, and Calendars
-
E-mail and Web Browsing
-
Location Information
-
Third-Party Applications
-
Retrieving Deleted SQLite Records
-
Retrieving Deleted Data from Raw Images on Android Devices
Day 3
Handling Locked Android Devices
-
Security Options on Android
-
Methods for Bypassing Locked Android Devices
-
Bypassing Android Security and Encryption
iOS (iPhone) Forensics
-
iOS Architecture
-
iOS Components
-
NAND Flash Memory in iOS Devices
-
iOS File Systems
-
iOS Versions
-
iOS Encryption
Day 4
OS File System Structures
-
Data Structure Layout
-
Physical
-
File System
-
Logical
-
Data Storage Formats
-
Physical and Logical Keyword Searches
iOS Evidentiary Locations
-
Primary Evidentiary Locations
-
Unique File Recovery
-
Parsing SQLite Database Files
-
Manual Decoding of iOS Data
Day 5
Retrieving User Activity Information iOS Devices
-
iOS Applications
-
Deep Dive into Data Structures on iOS Devices
-
SMS / MMS
-
Calls, Contacts, and Calendar
-
E-mail and Web Browsing
-
Location Information
-
Third-Party Applications
-
Retrieving Deleted SQLite Records
-
Retrieving Deleted Data from Raw Images
Handling Locked iOS Devices
-
Security Options on iOS
-
Current Acquisition Issues
-
Bypassing iOS Security
