DF330 Advanced Digital Forensic Analysis: iOS & Android  (4 Days)

 pdf

Montgomery Village, MD
Mon 01/06/2020 - Thu 01/09/2020
8:00am-5:00pm
Montgomery County Police Department

Public Safety Training Academy
8751 Snouffer School Rd
Rm 126
Montgomery Village, MD 20877

Course description
This course provides the advanced skills and knowledge necessary to analyze data on iOS devices (iPod Touch, iPhone, and iPad) and Android devices at an advanced level. Students use forensically-sound tools and techniques to analyze potential evidence, employing advanced techniques to uncover evidence potentially missed or misrepresented by commercial forensic tools. Topics include identifying potential threats to data stored on devices, available acquisition options, accessing locked devices, and the default folder structure. Core skills include analyzing artifacts such as device information, call history, voicemail, messages, web browser history, contacts, and photos. Instruction is provided on developing the "hunt" methodology for analyzing third party applications not supported by commercial forensic tools.

Mobile device hardware fundamentals. How mobile devices work, store data, and interact with a variety of networks.

Device handling. Properly preserving data for imaging and analysis. Identifying potential threats to data integrity.

Device acquisition and security. Acquisition options (physical, logical, device backups). Bypassing passcodes and properly defeating encrypted backups of iOS devices.

Advanced analysis techniques. Mounting images, partitioning scheme and default folder structure, types of artifacts (plists, SQLite databases, etc.).

Recommended skills
This is an advanced course, intended for experienced digital forensic examiners with a solid understanding of digital forensic principles and mobile device analysis procedures.

NW3C recommends that students complete the following courses before registering for Advanced Digital Forensic Analysis: iOS & Android.

Cancellation
All classes are subject to cancellation up to 45 days before the start of class if the minimum class registration threshold is not met.

Class Fee: $0
Request Wait List
Register for class
Clear to Register someone else