Course

Course Summary
Credit Type:
Course
ACE ID:
NCFI-0003
Organization's ID:
MDE
Location:
Classroom-based
Length:
3 weeks
Dates Offered:
Credit Recommendation & Competencies
Level Credits (SH) Subject
Lower-Division Baccalaureate 3 Digital Forensics
Description

Objective:

Investigators will gain experience with a wide array of mobile devices such as cell phones, GPS units, and tablets, forensics analysis tools, legal issues, and report generation for law enforcement. The course combines instructor-led discussions and practical exercises to teach methodologies and techniques used during investigations involving digital evidence of mobile devices with traditional investigative techniques.

As a result of this course, the student will be able to:

• Apply knowledge of different mobile device operating systems to isolate the mobile device
so that it does not send or receive transmissions.
• Apply knowledge of industry-standard forensic tools to perform an extraction of a mobile
device.
• Apply a knowledge of industry best practices to conduct mobile device seizures and
evidence recovery.
• Apply a knowledge of tracking histories of mobile device as it pertains to mobile device
examinations.
• Analyze a mobile device extraction using industry-standard forensic software.
• Analyze data sets extracted from mobile devices to locate data of evidentiary value.
• Evaluate data recovered from a mobile device investigation in order to prepare a mobile
device forensic exam report for courtroom testimony.
• Evaluate legal issues and apply them to digital evidence for mobile devices.
• Evaluate, obtain, and prepare court orders and search warrants used in a mobile device
investigation.

Learning Outcomes:

  • Apply knowledge of different mobile device operating systems to isolate the mobile device so that it does not send or receive transmissions.
  • Apply knowledge of industry-standard forensic tools to perform an extraction of a mobile device.
  • Apply a knowledge of industry best practices to conduct mobile device seizures and evidence recovery.
  • Apply a knowledge of tracking histories of mobile device as it pertains to mobile device examinations.
  • Analyze a mobile device extraction using industry-standard forensic software.
  • Analyze data sets extracted from mobile devices to locate data of evidentiary value.
  • Evaluate data recovered from a mobile device investigation in order to prepare a mobile device forensic exam report for courtroom testimony.
  • Evaluate legal issues and apply them to digital evidence for mobile devices.
  • Evaluate, obtain, and prepare court orders and search warrants used in a mobile device investigation.

General Topics:

  • Introduction and Case Studies Forensic Science Forensic Reporting Cellular Network Technology Cellular Network Design & Function Integrated Circuit Card Mobile Device Unique Identifiers & New Tech File Systems and Intro to Data Encoding Flash memory concepts Best Practices for First Responder Crime Scene Scenarios Android device overview iOS device overview iOS backup Device extractions and analysis using industry-standard tools ISP Adapters ISP Methodology ISP Extraction Courtroom Testimony Alternative Data Extraction
Instruction & Assessment

Instructional Strategies:

  • Audio Visual Materials
  • Case Studies
  • Classroom Exercise
  • Computer Based Training
  • Discussion
  • Laboratory
  • Lectures
  • Practical Exercises
  • Work-based Learning
  • Performance Rubrics (Checklists)

Methods of Assessment:

  • Examinations
  • Performance Rubrics (Checklists)

Minimum Passing Score:

70%
Supplemental Materials

Other offerings from United States Secret Service National Computer Forensics Institute