CASA Cellebrite Advanced Smartphone Analysis with Inseyets

The Cellebrite Advanced Smartphone Analysis with Inseyets course is a five-day (35 hours) advanced level course designed to provide training in forensic recovery and analysis of application data from smartphone extractions. The CASA Inseyets class leverages Inseyets Physical Analyzer (Inseyets PA) capabilities to explore database contents, and uses third-party, open-source tools and Python scripting to decode information not commonly decoded by forensic tools. In this course, examiners will decode both iOS and Android-specific applications to perform pattern of-life analysis and validate findings.

Level: Advanced

Length: 5 days

Certification Track: CCME Inseyets

Delivery: In-Person, Virtual and Self-Paced

*Blended Learning: Both the In-Person and Virtual courses incorporate a blended learning approach which requires the completion of self-paced pre-work modules. Participants must complete the assigned pre-work prior to attending class. The material in the pre-work will be covered in the final exam.

Course Learning Objectives

Upon successful completion of the course, the student will be able to:

• Recognize SQLite database structures and how to use search Query Language (SQL) to filter and sort data efficiently.

• Inspect databases in Inseyets PA to locate applications of interest to an investigation.

• Interpret unsupported data

• Identify basic data types and how they are used with Python.

• Interpret the structures of iOS and Android file systems.

• Analyze extractions with Inseyets PA.

• Examine and parse unsupported applications using the SQL Builder and incorporate the data into Inseyets PA.

Notes

This course is recommend for practicitioners familiar with Inseyets Physical Analzyer and graduates of the CCPA course. Either the CCPA or the CCPA for Inseyets certification satisfies the prerequisite requirement to attend the CASA Inseyets class. CASA Inseyets is the final course required for the Cellebrite Certified Mobile Examiner Inseyets (CCME Inseyets) capstone certification, which is designed to prepare practitioners with the knowledge, skills, and abilities to successfully conduct mobile device forensics and investigations.