FOR410 Mobile Device Forensics

Course Overview FOR410 - Mobile Device Forensics provides an introduction to mobile devices and the value that they offer in forensic investigations. The class addresses the methods used to store data, as well as the areas of the mobile device where data is stored and how to access it. The class will also discuss mobile device removable media and the role it plays with the mobile device. Students will cover network technology as well as three tools specifically designed for mobile device acquisition. Upon completion of an extensive hands-on experience, the student will draft a comprehensive forensic report, ensuring all actions were documented and conducted in a forensically sound manner   Objectives Provide students with an understanding of how mobile devices actually work and store data, and what data can be of forensic value, as well as how certain types of damage can determine what data can be acquired from the device Target Audience Professionals looking to broaden their cyber forensics skills or individuals that will begin working with mobile devices and acquiring data from them, as well as their removable components Estimated Course Length: 24 hours Day 1 Students will be introduced to mobile device hardware and architecture. Topics List Using faraday Preparing target media using dc3dd Acquiring a SIM card and saving to target media Creating a forensic image of removable media using dc3dd Day 2 Students will learn about cell phone acquisition and exploitation and become familiar with various mobile device acquisition tools. Topics List Exifdata analysis Viewing data in hex editor Conducting forensic analysis on previously imaged media Day 3 Students will learn the correct methods for forensic reporting and documentation. Topics List Device acquisitions following forensically sound methodologies Drafting of forensic report Day 4 Students will review the results from the forensic reports that have been submitted and acquisitions completed. Students will also go through a review of the course material. Capstone Exercise Students will utilize the knowledge and skills acquired throughout the course, in a hands on lab exercise