Cellebrite Certified Operator (CCO) for Inseyets
Cellebrite Certified Operator (CCO) is a 2-day intermediate level certification course designed to further develop mobile device handling and data extraction skills. This course reinforces forensically sound processes introduced in Cellebrite Mobile Forensic Fundamentals (CMFF), and guides participants through installing and configuring UFED Touch and UFED 4PC to conduct mobile device extractions. By completing practical hands-on exercises in the in-person course, participants will gain experience conducting Logical, File System, and Physical extractions, and creating shareable UFDR reports to streamline the investigative process. Participants will earn the CCO certification upon passing a knowledge test and practical skills assessment with a score of 80% or higher.
Course Learning Objectives
Upon successful completion of the course, the student will be able to:
- Identify the pre-extraction considerations examiners must address before beginning a forensic examination of a digital device according to standard best practices.
- Review and select the most efficient configurations for the latest Touch device and 4PC software by connecting to mobile devices with different operating systems and security features.
- Identify the basic principles and best practices for on-scene identification, collection, shielding, packaging, transporting, examination, and storage of digital evidence data and devices.
- Demonstrate best practices in handling digital evidence correctly by creating forensic documentation and following procedures that are legally defensible and repeatable.
- Conduct cell phone extractions using forensic best practices to identify key pieces of evidence while properly documenting the extraction process and using legally defensible procedures.
- Use the latest Touch/4PC extraction tools to perform supported data extractions from various devices and identify the limitations of the tool as it pertains to a given operating system (i.e. iOS vs. Android).
- Efficiently navigate the Physical Analyzer interface and apply search and filtering techniques to explore, manage, and isolate data for analysis.
- Create a triage report using Cellebrite Physical Analyzer Report Wizard and customize the report using various export file types, security features, display details, and so on.
