Oxygen Forensics Complete Certification – Youngsville NC – 10 July 2018

$2,399.00

Students will obtain a start to finish education on the use of Oxygen Forensic® Detective. The course adds to the Basic and Expert course by introducing advanced methods of Smart Device collections and data analysis. Students will examine collect and analyze data from iOS, Android, and Windows Phone smart devices. Students will work to obtain physical images, understand file system formats, storage methods and evidence locations. Students receive training and instruction on Cloud Storage and extraction techniques using Oxygen Forensic® Detective. SQLite database data is extremely important to today’s smart device examinations. Not only will students receive training on the SQLite database format and creating SQL queries, but Property Lists, recovering deleted data, write-ahead-logs, shared-memory-files and interpreting database artifacts using the SQLite Viewer and secondary tools are covered.
Evaluation Procedures and Grading Criteria.

Compare

Description

Students will obtain a start to finish education on the use of Oxygen Forensic® Detective. The course adds to the Basic and Expert course by introducing advanced methods of Smart Device collections and data analysis. Students will examine collect and analyze data from iOS, Android, and Windows Phone smart devices. Students will work to obtain physical images, understand file system formats, storage methods and evidence locations. Students receive training and instruction on Cloud Storage and extraction techniques using Oxygen Forensic® Detective. SQLite database data is extremely important to today’s smart device examinations. Not only will students receive training on the SQLite database format and creating SQL queries, but Property Lists, recovering deleted data, write-ahead-logs, shared-memory-files and interpreting database artifacts using the SQLite Viewer and secondary tools are covered.
Evaluation Procedures and Grading Criteria
Students are evaluated on class participation and the final project. Passing of class will earn Attendance Certificate and access to online certification examination.
Attendance Statement
Students cannot miss more than 1 hour of class to receive a certificate of attendance. Students completing the course will be eligible to take the Oxygen Forensic® User Certification exam free of charge within 30 days of completing the course.
Required Student Resources
Students will receive a manual during class that will contain the class content and worksheets. Students are required to bring their own laptop for the training.

Travel and Lodging

  • The HTCI classroom is located on the campus of SIRCHIE International, the worlds largest producer and supplier of Evidence collection material in the world.  The campus is made up of 126 acres of prime training ground.  A mix of first class classrooms and outdoor facilites make this an exceptional location to train in.  The HTCI classroom is located 30 minutes from the Raleigh/Durham airport for the convenience of students that must travel by air.  The facility is also serviced by two major interstates allowing for quick and easy access to and from the facility.

    The facility is a nonsmoking facility.  Students attending will be required to leave campus to smoke.

    I agree for my personal data to be processed by , for the purpose(s) of presenting the data you have submitted on the map..

    I agree for my personal data, provided via map API calls, to be processed by the API provider, for the purposes of geocoding (converting addresses to coordinates), reverse geocoding and generating directions.

    Some visual components of WP Google Maps use 3rd party libraries which are loaded over the network. At present the libraries are Google Maps, Open Street Map, jQuery DataTables and FontAwesome. When loading resources over a network, the 3rd party server will receive your IP address and User Agent string amongst other details. Please refer to the Privacy Policy of the respective libraries for details on how they use data and the process to exercise your rights under the GDPR regulations.

    WP Google Maps uses jQuery DataTables to display sortable, searchable tables, such as that seen in the Advanced Marker Listing and on the Map Edit Page. jQuery DataTables in certain circumstances uses a cookie to save and later recall the "state" of a given table - that is, the search term, sort column and order and current page. This data is held in local storage and retained until this is cleared manually. No libraries used by WP Google Maps transmit this information.

    Please see here and here for Google's terms. Please also see Google's Privacy Policy. We do not send the API provider any personally identifying information, or information that could uniquely identify your device.

    Where this notice is displayed in place of a map, agreeing to this notice will store a cookie recording your agreement so you are not prompted again.

Course Agenda

OBJECTIVES• Gain extensive knowledge on today’s smart devices including iOS, Android and Windows Phone.
• Understand file system formats and data types found within major smart device operating systems.
• Provide information to students to assist in locating, processing and recovering artifacts from the smart device file system.
• Gain required knowledge to create advanced SQL queries to recover data from unsupported app and cache files within the smart device file system.
• Students will gain valuable knowledge during the training that will assist in passing a certification examination
Notes:
Student Schedule
(Proposed, as topics may move within the structure for time and external events)
Day 1
● History and Quick Introduction
● CDMA/GSM
● Legality
● Isolation Techniques
● Device Security
● Different ways to connect to a mobile device
○ Cable
○ Bluetooth
○ JTAG
● Troubleshooting Drivers
● Connections
○ ADB
○ Passwords iOS
○ Android/Blackberry
○ Logical/Physical collections of Smart
● Devices Differences
● Collecting Mobile Device Data
● Smart Device Collection
● Basic data analysis
● Backup and Import of Mobile Device Images
○ iTunes
○ Android
○ JTAG
● Other Forensic Solutions
● Basic Reporting
● Create basic report of Smart Device Collection

Day 2
● Multi-device collections
○ iOS
○ Android
● Cases
● Creating Cases, Removing Cases, Archiving Cases
● Live device
● Imported Images
● App Data
● Analysis of valuable data
● Key Evidence Bookmarking
● Aggregated Data and Groups
● Contacts
● Merge/Un-Merge
● Analytics
● Social Analysis
● Link Analysis
● Timelines
● Searching
○ Text
○ Regular Expressions
○ Numbers
○ Advanced Reporting
○ HTML
○ PDF
● Associated Images
● Key Evidence

Day 3
● Obtaining File System Data
○ iOS
○ Android
○ Windows Phone
● Types of File Systems
○ iOS
○ Android
○ Windows Phone
● Recovering Artifacts from the smart device
● Evidence areas
● File Types
● Recovery Methods
● Cloud Extractions
● Using Cloud Extractor
● Property List
● Data Storage
● Types of Data
● PLIST Breakdown
● SQLite Databases
● Data Storage
● Types of Data
● SQLite Breakdown
● Free Pages
● SQL Queries
● Creating/Running
Notes:

Reviews

There are no reviews yet.

Be the first to review “Oxygen Forensics Complete Certification – Youngsville NC – 10 July 2018”

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.