Oxygen Forensics Complete - 3 day course

18-20 September 19, 9am-5pm - Avatu Academy, Princes Risborough, Nr Aylesbury, Bucks


  • Gain extensive knowledge on today’s smart devices including iOS, Android and Windows Phone.
  • Understand file system formats and data types found within major smart device operating systems.
  • Provide information to students to assist in locating, processing and recovering artifacts from the smart device file system.
  • Gain required knowledge to create advanced SQL queries to recover data from unsupported app and cache files within the smart device file system.
  • Students will gain valuable knowledge during the training that will assist in passing a certification examination

Students are evaluated on class participation and the final project. Passing of class will earn Attendance Certificate and access to online certification examination.

Attendance Statement

Students cannot miss more than 1 hour of class to receive a certificate of attendance. Students completing the course will be eligible to take the Oxygen Forensic® User Certification exam free of charge within 30 days of completing the course.

Course Options

This course is being held in London and we will provide all the technology needed.


Day 1

Topic Covering
History and quick introduction CDMA/GSM legality isolation techniques, device security
Different ways to connect to a mobile device Cable, Bluetooth, JTAG
Troubleshooting Drivers, connections, ADB
Passwords iOS, Android, Blackberry
Logical/Physical collections of smart devices Differences, data representation of both
Collecting mobile device data Smart device collection, basic data analysis
Backup and import of mobile device images iTunes, Android, JTAG, other forensic solutions
Basic reporting Create basic report of smart device collection

Day 2

Topic Covering
Multi-device collections     iOSAndroid

Creating cases, removing cases, archiving cases live device imported images

App data Analysis of valuable data
Key evidence Bookmarking
Aggregated data & groups Contacts, Merge/un-merge
Analytics Social analysis, link analysis, timelines
Searching Text, regular expressions numbers
Advanced reporting HTML, PDF associated images, key evidence

 Day 3

Topic Covering
Obtaining file system data iOS Android Windowsphone
Types of file systems iOS Android Windows phone
Recovering artifacts from the smart device Evidence areas file types recovery methods
Cloud extractions Using Cloud Extractor
Property list Data storage types of DataPLIST breakdown
SQLite databases

Data Storage types of DataSQLite breakdown, Free pages, SQL queries, creating/running

Download full terms and conditions here

Lead Trainer

Course Essentials

18-20 September 19, 9am-5pm

Avatu Academy, Princes Risborough, Nr Aylesbury, Bucks

Suitable For:

Joining Fee:


Email us on academy@avatu.co.uk or phone 01296 621121 to find out more.

Want to Book?

Book your place

Make a Booking

Captcha Image

Who we work with

Your questions

Read all questions ›

Sign up to receive our updates

Protect your reputation with knowledge. Organisations can stay on the front foot with the latest news & developments. Sign up now to stay in touch & ahead of the game. You can find out more on Twitter & LinkedIn too.​

Prove you're not a robot.

Privacy and cookies | Conditions of use

© Avatu Ltd. The content on this website is owned by us and our licensors. Do not copy any content (including images) without our consent.

Website Design and Digital Marketing by Urban Element