Mobile Device Acquisition and Analysis
|Session(s)||Location||Start date||End date|
|$ 4,200.00||$ 950.00||$ 750.00||$ 5,900.00|
Mobile devices, including cellular phones and tablet computers, are continuously evolving. They contain potential evidence that is important from both an investigative and intelligence gathering perspective. Security features on most mobile devices restrict what evidence can potentially be extracted. Examiners must keep up to date with developing technologies and what tools and techniques are available. Police investigators and analysts trained in digital forensics increase their knowledge and effectiveness in extracting, analysing and disclosing information obtained from mobile devices.
Format and delivery
- Length of course
- 8 days
- Class size
- maximum 20 students
- Delivery setting
- theoretical and practical components are done in a computer laboratory
- Knowledge of basic cellular phone technology.
- Understanding law enforcement's authority to search and seize evidence from mobile devices.
- Understanding how to apply sound mobile device seizure procedures.
- Understanding the types of information that can be recovered from a mobile device and, if applicable, its cellular service provider.
- Knowledge of the appropriate analysis tools and methodology to process digital evidence from mobile devices.
- Understanding how to access and preserve data from a mobile devices, SIM cards and/or media cards.
- Ability to manually verify findings when possible.
- Knowledge of techniques to use when traditional software or hardware tools will not work.
Eligibility and mandatory requirements
- This course is offered to forensically trained investigators or analysts who are required to seize and analyze digital evidence from mobile devices.
- Registrants must be a member of a high tech crime unit.
- Registrants must have successfully completed the Computer Examiner (CMPFOR) course or equivalent.
- Acceptance or refusal in the course is at the discretion of the Canadian Police College.
- Success in the course is based on participation and completion of all required assignments.
- Various evaluation methods are used, including a practical exercise, a practical exam and final exam.
- Re-testing or re-evaluation is conducted at the discretion of the course instructor.
For more details or other information about the course, please email firstname.lastname@example.org.
- Date modified: