DF330 Advanced Digital Forensic Analysis: iOS & Android (Jul 2019, Tennessee)

Monday Jul 29, 2019 - 07:00am UTC to Thursday Aug 01, 2019 - 04:00pm UTC
Event Description: 

This course provides the advanced skills and knowledge necessary to analyze data on iOS devices (iPod Touch, iPhone, and iPad) and Android devices at an advanced level. Students use forensically sound tools and techniques to analyze potential evidence, employing advanced techniques to uncover evidence potentially missed or misrepresented by commercial forensic tools. Topics include identifying potential threats to data stored on devices, using available acquisition options, accessing locked devices, and understanding the default folder structure. Core skills include analyzing artifacts such as device information, call history, voicemail, messages, web browser history, contacts, and photos. Instruction is provided on developing the "hunt" methodology for analyzing third-party applications not supported by commercial forensic tools.

Course structure:

  • Mobile device hardware fundamentals. Understand how mobile devices work, store data, and interact with a variety of networks.
  • Device handling. Learn about properly preserving data for imaging and analysis, as well as identifying potential threats to data integrity.
  • Device acquisition and security. Understand acquisition options (physical, logical, device backups) and how to bypass passcodes and properly defeat encrypted backups of iOS devices.
  • Advanced analysis techniques. Learn about mounting images, partitioning scheme and default folder structure, and types of artifacts (plists, SQLite databases, etc.).
Location: 
Building Three 545 Marriott Drive, Suite 850
Nashville, TN 37214
United States
Event Cost Information
AmountDescription
$0.00
Free
Space Available: 
Yes
Organizer Information
Event POC: 
Damita Jones
Event POC Email: 
Event POC Phone: 
1-800-221-4424
Category: