Scribd
Upload
193 views

Cellebrite Certified Operator (CCO) : Course Description

Cellebrite Certified Operator

Uploaded by

'Webber Van Botter
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
193 views

Cellebrite Certified Operator (CCO) : Course Description

Cellebrite Certified Operator

Uploaded by

'Webber Van Botter
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

Cellebrite Certified Operator (CCO)

Global forensic training

Course description
The 2-day, Cellebrite Certified Operator (CCO) course is a valuable mobile forensic
certification program, with an extraordinary emphasis on the digital forensics tools
operator.
Level
Immediately following perfunctory introductions, no time is wasted, and participants
Intermediate
begin hands-on activities installing software and pre-extraction device activities. The CCO
program is designed to improve digital forensics workflows by exposing attendees to a
Length linear evidence collection, examination, and post-processing architecture.
Two days (14 hours)
The course is designed to accommodate passive and active learner styles. Each module
and topic include dynamics to encourage the reception, processing, and retention of
Training Track the skills needed to operate the Touch 2, 4PC, and Physical Analyzer for: cloning SIM
Core Mobile Forensic,
cards, completing extractions with boot-loaders and other techniques, troubleshooting
Investigator, and
problematic mobile device extractions, and triaging devices to create reports for the
Analyst
expedited service of cases.
Beyond the use of Cellebrite products to complete the many hands-on exercises in CCO,
Delivery mode
Instructor-Led, On Line the course focuses on the observable and measurable knowledge skills and abilities
On Demand befitting a legitimate certification course, meeting Quality Matters standards. Cellebrite
believes a responsibility exists to teach members of the digital forensic community
the necessary competencies to conduct exams ethically, using universal professional
standards.
Cellebrite Certified Operator (CCO)

Course objectives
Upon successful completion of this course, the student will be able to:
• Install and configure Touch, Touch2 or 4PC and UFED Physical Analyzer software.
• Explain the best practices for the on-scene identification, collection, packaging, transporting, examination and
storage of digital evidence data and devices.
• Display best practice when conducting cell phone extractions.
• Identify functions used within Touch, Touch2 or 4PC to perform supported data extractions.
• How to use triage reporting for investigation
• Demonstrate proficiency of the above learning objectives by passing a knowledge test and practical skills
assessment with a score or 80% or better.

Module Description and objectives


• Describe Cellebrite's core training and certification process.
Introduction • Recount Cellebrite's accolades and accomplishments.
• Recognize the abilities of Cellebrite Platforms and digital forensic solutions.
• Explain the legal responsibilities of practitioners using Cellebrite products, software, and services.

• Recognize legal considerations for seizing and searching devices.


Forensic Handling • Examine mobile device and internet of things (IoT) technologies of value in an investigation
of Mobile Devices • Describe the phases of the digital forensics process.
• Relate the correct procedures for identifying and handling digital evidence devices as first responders.
• Identifying Devices on Scene (Make and Model)
• Identify various locking mechanisms found on mobile devices.
• Explain best practices to document mobile device investigations.
• Reader Search Techniques.
• Shielding and Isolation Techniques and Considerations
• Discovery of On-State Device Collection Procedures
• Discovery of Off-State Device Collection Procedures

• List the components, features, or functions for the Touch2 and 4PC
Touch2 and 4PC • Describe how to purchase and maintain the license UFED technology.
Familiarization • Discuss how to update software and firmware for Touch2 and 4PC
• Implement an installation of 4PC on a computer workstation.
• Modify Touch2 and 4PC configurations for the extraction of different devices and investigative needs.

• Best Practice for Extractions ..


Cellebrite • Android Screen Locks
Extraction • Passcodes on iOS Devices
Methodology • SD Card Types
• Explain the SIM file system organization.
• Complete SIM card extractions and cloning using Touch2/4PC.
• Using the Phone Power-Up Cable
• UFED Extractions
• Data Extraction Approaches
• Extraction Method Options
• Extraction Connection Interfaces
• UFED Camera Services.
Cellebrite Certified Operator (CCO)

Module Description and objectives


• Extraction Methods Explained – Physical
Cellebrite • Extraction Methods Explained – Physical w/Client.
Extraction • What is a Boot Loader?..
Methodology • File System Extractions Explained
• Extraction Methods Explained – File System
• Physical Analyzer Extractions
• iOS Advanced Logical Extractions Output Described.
• Hand Scroll Techniques
• Post Extraction Evidence Handling
• Extraction Methods FAQ (Logical, File System, Android Backup, APK Downgrade, Physical Extraction,
Advanced ADB, Advanced ADB (Generic), ABD (Rooted), Boot Loader, Smart ADB, CAS, EDL, Password
Lock/Bypass

• Triage Reporting – User Data .


Triage Reporting • Triage Reports for Further Investigation
• Triage Analysis Obstacles
• Triage and Reader as a Force Multiplier
• Reader Capabilities
• Triaging with Physical Analyzer
• SMS – Triage May Require Additional Decoding
• Searches and Filters - Overview
• Tagging Items of Interest
• Initiating the Creation of a Triage Report
• The Report Wizard
• Generating the Report
• Passwords and Encryption
• Reader Software
• Reporting - What to do After Reader is Distributed

Important notice: required materials for CCO online on demand

Online On-Demand classes are designed for students who already own or have access to currently licensed Cellebrite
hardware and software, prior to starting the class. Students who do not already own or have access to currently licensed
Cellebrite hardware and software are encouraged to take our Instructor-Led or Live Online classes.

Read more about the Required Hardware, Software, and Materials for our Online On-Demand classes at: cellebritelearningcenter.com
Get skilled. Get certified.

Every day around the world, digital data is impacting investigations. Making it
intelligent and actionable is what Cellebrite does best. The Cellebrite Academy
reflects our commitment to digital forensics excellence; training forensics
examiners, analysts, investigators and prosecutors around the world to achieve a
higher standard of professional competency and success.

Learn more at cellebritelearningcenter.com

The materials and topics provided herein are provided on an “as is” and “as available” basis without any warranties of any kind including, but not limited to warranties
of merchantability, fitness for a particular purpose or guaranties as to its accuracy or completeness. Please note that some materials, topics and items provided herein
are subject to changes. Cellebrite makes no warranties, expressed or implied, for registered trademarks of cellebrite in the united states and/or other countries. Other
trademarks referenced are property of their respective owners. Applicable law may not allow the exclusion of implied warranties, so the above exclusion may not apply to you.

© 2018 Cellebrite Inc. All rights reserved.


Rev. CCO 12-18 (EN)

You might also like