RSS Feed

JTAG Dumping for Android & Windows Mobile

Advanced Level | 4 days

Course Aims

JTAG Dumping for Android & Windows Phone is a 4 day course designed to teach existing mobile device examiners how to perform physical extractions of Android & Windows Phone devices (locked or unlocked) which cannot be examined using established commercial forensic tools and techniques. As the tools used on this course were not designed for forensic use, appropriate training is essential to ensure that data is not erased from the device during the process. In order to ensure that delegates can extract data from the widest range of handsets, the course covers connecting to the handset PCB via model-specific connectors (“jigs”) and by hand-soldered cables (when no jig for that handset model is available).

What you will learn

By the end of the course, students will be able to:

  • Perform memory dumps of Android and Windows Phone devices via their JTAG interface using RIFF Box
  • Manually solder JTAG connections to Android & Windows Phone devices for which no “jig” (connector) exists
  • Recover swipe patterns, PIN codes and passwords from memory dumps of Android devices
  • Recover live and deleted data from memory dumps of Android & Windows Phone devices
  • Explain & justify your actions in court

Who should attend?

This course is targeted at existing phone examiners who have at least 6 months experience in mobile device forensics. The course includes some hand soldering and the nature of the close work involved will require good eyesight and a steady hand. Previous experience in handset dis-assembly and soldering would be beneficial but not essential.

Course Dates:

Contact us for course dates.


£3,065 + VAT (non-residential)

£2,520 + VAT (discounted law enforcement rate, non-residential)

To book

Contact us at or call +44(0)20 8133 8758

Comments are closed.