During the morning session  Kevin demonstrated that Internet artefacts can be recovered from a wide range of handsets (not just smartphones) and stepped through the format of web cache records for commonly encountered web browsers. Being able to tell which websites a user has visited (and when) is more important than ever; sadly this type of evidence can be overlooked if the commercial forensic tool in use does not decode the artefacts in question.

After lunch the workshop focused on identifying and interpreting traces of Google Maps usage on mobile phone handsets. Kevin also demonstrated how being able to write simply Python scripts to speed up the analysis of proprietary file formats is hugely beneficial for a forensic examiner.

The over-subscribed workshop was run at the excellent facilities at the Open University in Milton Keynes.

Our Phone Forensics Deconstructed training course gives delegates hands-on experience of examining and interpreting Internet and satnav artefacts from mobile phones. Contact us for more information.

Our new Built-in Mobile Phone Web Browsers page provides details on which web browser is pre-installed on which handset model (something which is often less than obvious!). The page also points examiners to where within the device’s file system the artefacts are located.

Our Phone Forensics Deconstructed training course teaches mobile phone examiners how to find, recover and interpret Internet artefacts from mobile phones.

More details regarding the course can be found here

Contact us now as this course is also filling fast!

“Although it is important for practitioners to be conversant with forensic tools, training programs that concentrate on commercial off-the-shelf (COTS) forensic products are generally insufficient. An effective training program develops core competencies in digital forensics, and teaches practitioners to combine various existing tools and methods…….Although training that concentrates on commercial off-the-shelf forensic tools enables practitioners to perform certain routine tasks, digital investigators need to appreciate the limitations of each tool and have versatility in using multiple tools.

Hear hear!

At Control-F we believe passionately that digital forensics training is about more than knowing which buttons to click. We think digital forensic analysts need to understand underlying principles first and then introduce them to tools which will implement and automate those principles and processes (thereby making the forensic analyst more efficient).

Our vendor-neutral training courses utilise multiple tools from different vendors; we assess the value of different products during our research and course development and only include products on our courses which we trust. Any products which appear in our training courses are there because of their usefulness; we don’t get paid to include tools in our courses (although our customers often receive discounts for those products by attending our training!)

As the American essayist Ralph Waldo Emerson once said

“As to methods there may be a million and then some, but principles are few. The man who grasps principles can successfully select his own methods. The man who tries methods, ignoring principles, is sure to have trouble.”

Our Phone Forensics Deconstructed course teaches delegates about the structure of SMS messages at a bits and bytes level, giving them the knowledge and skills they need to be able to search for, recover and interpret live and deleted SMS from hex dumps of a multitude of handset models.

Contact us now to book on our next scheduled course in May, or to enquire about running the course at your location.

Foundation in Mobile Phone Forensics is a 4½ day course designed for those just starting out in mobile phone forensics (or existing examiners who have not had the benefit of formal training). The course is highly practical with delegates gaining hands-on experience with market leading forensic tools as they work through a series of realistic scenarios. Students are taught the theory and the practical sides of recovering evidence from handsets, SIM cards and memory cards.

By attending Control-F training courses, delegates will be exposed to forensic tools and products from a range of vendors (including many free utilities); thereby allowing them to compare and contrast their performance and quantify their benefit to their unit or department. All Control-F training is built around the ACPO Principles of Computer Based Digital Evidence so that customers can be assured that what is being taught is consistent with internationally recognised good practice in digital forensics.

At Control-F we know that there will be many occasions when delegates have returned to the workplace and will need to refer back to a topic that was covered on the course. For that reason students attending Foundation in Mobile Phone Forensics receive high quality printed & electronic training materials which include a 95 page book (fully referenced and written specifically to accompany the course).

Contact us today to enquire about availability and pricing.

The delegates were extremely positive in their feedback on the course:

“One of the best courses I have attended”

“It has given me everything I needed to know from set-up to examination”

“Well paced and relaxed, would highly recommend it”

Contact us today to find out how to book onto our next course.

“This was a brilliant course – did exactly what it said on the tin. I certainly got what I came for”

“Has filled a gap in the market which will be very beneficial to a lot of people”

“Another excellent course from Control-F”

Flasher boxes help mobile forensic examiners recover evidence from devices which may not be supported by commercial off-the-shelf forensic tools, allowing them to gather key evidence. However, not being designed for forensic use, flasher boxes have the potential to erase data from devices; hence training is critical.

Contact us now before our next course sells out!