Oxygen Forensics Complete - 3 day course

Objectives

  • Gain extensive knowledge on today’s smart devices including iOS, Android and Windows Phone.
  • Understand file system formats and data types found within major smart device operating systems.
  • Provide information to students to assist in locating, processing and recovering artifacts from the smart device file system.
  • Gain required knowledge to create advanced SQL queries to recover data from unsupported app and cache files within the smart device file system.
  • Students will gain valuable knowledge during the training that will assist in passing a certification examination

Students are evaluated on class participation and the final project. Passing of class will earn Attendance Certificate and access to online certification examination.

Attendance Statement

Students cannot miss more than 1 hour of class to receive a certificate of attendance. Students completing the course will be eligible to take the Oxygen Forensic® User Certification exam free of charge within 30 days of completing the course.

Course Options

This course is being held at the Avatu Academy, in Princes Risborough, near Aylesbury, Bucks, UK, and we will provide all the technology needed.

Deliverables

Course Outline - Day 1

Topic Covering
History and quick introduction CDMA/GSM legality isolation techniques, device security
Different ways to connect to a mobile device Cable, Bluetooth, JTAG
Troubleshooting Drivers, connections, ADB
Passwords iOS, Android, Blackberry
Logical/Physical collections of smart devices Differences, data representation of both
Collecting mobile device data Smart device collection, basic data analysis
Backup and import of mobile device images iTunes, Android, JTAG, other forensic solutions
Basic reporting Create basic report of smart device collection

 

Course Outline - Day 2

Topic Covering
Multi-device collections     iOSAndroid
Cases

Creating cases, removing cases, archiving cases live device imported images

App data Analysis of valuable data
Key evidence Bookmarking
Aggregated data & groups Contacts, Merge/un-merge
Analytics Social analysis, link analysis, timelines
Searching Text, regular expressions numbers
Advanced reporting HTML, PDF associated images, key evidence

 

Course Outline - Day 3

Topic Covering
Obtaining file system data iOS Android Windowsphone
Types of file systems iOS Android Windows phone
Recovering artifacts from the smart device Evidence areas file types recovery methods
Cloud extractions Using Cloud Extractor
Property list Data storage types of DataPLIST breakdown
SQLite databases

Data Storage types of DataSQLite breakdown, Free pages, SQL queries, creating/running

Suitable For

Lead Trainer

Register your interest in this course or ask for more information

Register Interest

Upcoming courses

Oxygen Forensics Complete - 3 day course

more dates tbc, 9am-5pm

Book and More Details

Who we work with

Your questions

Read all questions ›

Sign up to receive our updates

Protect your reputation with knowledge. Organisations can stay on the front foot with the latest news & developments. Sign up now to stay in touch & ahead of the game. You can find out more on Twitter & LinkedIn too.​

Please complete the letter in the box below (to help us filter out spam)

Captcha Image

Privacy and cookies | Conditions of use

© Avatu Ltd. The content on this website is owned by us and our licensors. Do not copy any content (including images) without our consent.