Mobile Forensics Expert

Why Attend

This course is designed for forensic investigation professionals and deals with Mobile forensics. The course assumes a prerequisite knowledge of computer security and digital data structures as well as the legal aspects of admissibility of evidence in court. It covers the essentials of Mobile File Structures, Data Extraction, Analysis and Reporting. This course will teach investigators the tools and techniques to perform Mobile Data Extraction, Mobile Data Analysis and Evidence Reporting on different mobile devices.

Overview

Course Outline

Schedule & Fees

Course Methodology

Instructor-led training that uses interactive learning methods, including class discussion, small group activities, and role-playing

Course Objectives

The essentials of Mobile File Structures, Data Extraction.; Analysis and Reporting For data extraction.; Understanding of the tools and techniques to perform Mobile Data Extraction, Mobile Data Analysis.; Evidence Reporting on different mobile devices.

Target Audience

This course is designed for: Ethical Hacking Expert.; Digital Forensics Investigators.; Information Security Professionals.; Risk Assessments Professionals.; Mobile Developers.; anyone who deals with implementation, testing, security hardening of mobile devices.

Target Competencies

n/a

Day 1

Forensic Acquisition of Smartphones

Logical Acquisition
File System Acquisition
Physical Acquisition
Advanced Methods

Android Forensics

Android Architecture
Android Components
NAND Flash Memory in Android Devices
Android File System Overview

Day 2

Android File System Structures

Data Structure Layout
Physical
File system
Logical
Data Storage Formats
Physical and Logical Keyword Searches

Retrieving User Activity Information from Android Devices

Android Applications
Data Structures on Android Smartphones
SMS / MMS
Calls, Contacts, and Calendars
E-mail and Web Browsing
Location Information
Third-Party Applications
Retrieving Deleted SQLite Records
Retrieving Deleted Data from Raw Images on Android Devices

Day 3

Handling Locked Android Devices

Security Options on Android
Methods for Bypassing Locked Android Devices
Bypassing Android Security and Encryption

iOS (iPhone) Forensics

iOS Architecture
iOS Components
NAND Flash Memory in iOS Devices
iOS File Systems
iOS Versions
iOS Encryption

Day 4

OS File System Structures

Data Structure Layout
Physical
File System
Logical
Data Storage Formats
Physical and Logical Keyword Searches

iOS Evidentiary Locations

Primary Evidentiary Locations
Unique File Recovery
Parsing SQLite Database Files
Manual Decoding of iOS Data

Day 5

Retrieving User Activity Information iOS Devices

iOS Applications

Deep Dive into Data Structures on iOS Devices
SMS / MMS
Calls, Contacts, and Calendar
E-mail and Web Browsing
Location Information
Third-Party Applications
Retrieving Deleted SQLite Records
Retrieving Deleted Data from Raw Images

Handling Locked iOS Devices

Security Options on iOS
Current Acquisition Issues
Bypassing iOS Security

$3875

Cairo

Country: Egypt

Duration: One week

Date: 08–12 Sep 2025

$3275

Beijing

Mobile Forensics Expert

Overview

Course Outline

Schedule & Fees

Course Methodology

Course Objectives

Target Audience

Target Competencies

$3875

Country: Egypt

Duration: One week

Date: 08–12 Sep 2025

$3275

Country: China

Duration: One week

Date: 20–24 Apr 2026