Mobile Device Forensics
The percentage of forensic investigations that include mobile devices are increasing at a rapid speed. Our expectations
of having our digital world mobile has single-handedly changed the game for forensics.
Art of Exploitation®: Mobile Device Forensics Edition, provides an introduction to mobile devices and the value that
they offer in forensic investigations. Furthermore, the class will address the methods used to store data, as well as the
areas of the mobile device where data is stored and how to access it. The class will also discuss mobile device removable
media and the role it plays with the mobile device.
Students will cover network technology as well as three tools specifically designed for mobile device acquisition. Upon
completion of an extensive hands on experience, the student will draft a comprehensive forensic report, ensuring all actions
were documented and conducted in a forensically sound manner.
Provide students with an understanding of how mobile devices actually work, store data, and what data can be of forensic value. In addition,
students will discuss a number of acquisition methodologies, as well as how certain types of damage can determine what data can be acquired from the device.
Class is approximately 60% hands on training and 40% instruction based training. A variety of mobile devices are provided for the students, as well as other media
(SIM Cards and MicroSD Cards). Students will effectively use three of the leading mobile device acquisition tools in order to acquire data from a number of mobile devices.
- Forensic imaging using FTK Imager
- Forensically preparing target media using dc3dd
- Extensive mobile device acquisition using multiple sources applied to multiple types of mobile media Forensic analysis of a raw image using autopsy
- Exifdata analysis
- Viewing data in a hex editor and drafting a comprehensive forensic report