BelkaX-302 Advanced Mobile Investigations

Master the techniques for advanced data acquisition and thorough analysis of digital evidence from iOS and Android mobile devices using Belkasoft X.

Register

Course details:

Language: English

Duration: 2 days

Formats and prices:

  • Online: $1200
  • Onsite: from $1300
    (depending on the location)

The course is designed for

Law enforcement
Military investigations
Private security

What you will learn

This course will provide you with the knowledge and skills to use Belkasoft X forensic software for in-depth analysis of iOS and Android mobile device digital evidence, including:

SQLite Forensics

  • Important SQLite database features and settings
  • SQLite queries
  • How to locate deleted data inside an SQLite database

iOS Advanced Acquisitions

  • Overview of iOS acquisition methods
  • Acquisition with a lockdown file
  • Agent-based Full File System acquisition
  • Checkm8-based device acquisition

iOS Advanced Analysis

  • Full File System Features—Data not included with an iTunes Backup
  • Keychain
  • System Artifacts—Knowledge C, Biome, and Location Data
  • Third-Party Apps—SQLite databases and Plist files

Android Advanced Acquisitions

  • Overview of Android acquisition methods
  • APK Downgrade acquisition
  • Screen Capture acquisition
  • Chipset-specific acquisition methods

Android Advanced Analysis

  • System Artifacts—Passwords, Account and App Information, and Device Properties
  • Third-Party Apps—SQLite databases and XML files

As a proven industry leader, Belkasoft has remained at the forefront of innovation when forensically acquiring mobile device data, while safely bypassing security constraints using the latest techniques. And you can learn all of them.

Modules

  1. Introduction1 hour
  2. SQLite Forensics2 hours
  3. Advanced iOS Device Acquisitions1 hour
  4. Advanced iOS Analysis3 hours
  5. Advanced Android Device Acquisitions1 hour
  6. Advanced Android Analysis3 hours
  7. Final Practical3 hours
  8. Belkasoft X Reporting1 hour

This course is meant for intermediate to advanced users. Although not required, BelkaX-101 should be completed before taking this course, or the participant should be proficient with the use of the Belkasoft X forensic software.

Expertise

The Belkasoft course is written based on over fifteen years of field experience from working with LE officers and CCU examiners worldwide. 

The techniques taught in this course have been curated from extensive research, testing, and use on live systems involved in actual cyber crimes investigated around the world where DSI examiners were actively involved as contracted analysts, instructors, and mentors.

Register to the course