CJC-FRN7906 - Level 2: Mobile Device Forensics

Course Description

This course combines the knowledge of multiple mobile forensic software programs.  It will equip investigators, detectives, and other law enforcement personnel with new concepts regarding the forensic extraction of mobile devices.  Students will spend time with hands-on exercises utilizing mobile forensic programs in order to learn the basics of the extraction software and how the tools can enhance a law enforcement officer’s investigation and the seizure of mobile phones.

Course Outline

1. Overview of Smart Phone and Tablet Devices
2. Current Roadblocks with Technology
3. Utilize Multiple Forensic Software Programs
4. Securing and Preserving Mobile Phone and GPS Evidence
5. SIM Card Technology
6. Logical Memory Dumps (including iPhone and Android)
7. Physical Memory Dumps
8. Issues and Practical Exercises
9. Report Writing and Exporting of Data
10. Knowledge of GPS Devices and Examination
11. Apple iOS Forensics and File Systems
12. Current Legal Issues with Mobile Devices and Recent Cases

Learner Outcomes

Upon successful completion of the course, the student will be able to complete the following:

• Hands on experience using some of the world's most widely used solutions by law enforcement
• Understand most basic hardware and software requirements for mobile forensics
• Proper handling of evidence
• Understand service provider information and tower information
• Pursue legal considerations; court orders and search warrants with more expertise
• Review examination considerations for many mobile devices
• Be able to create reports and prepare for courtroom testimony

Notes

Method of Instruction: Lecture, PowerPoint, Discussion and Practical Exercises

Evaluation: Class Participation and Final Exam