GLOBAL FORENSIC TRAINING

Cellebrite Certified Physical Analyst (CCPA)

COURSE DESCRIPTION

>>>

Level
Advanced
Length
3 days
Delivery Mode
Instructor Led
Training or
Web-Based
Training

This 3-day course is designed for the intermediate and advanced

investigator / digital forensic examiner. This course focuses on
the use of Cellebrites UFED Touch and/or UFED 4PC to perform
file system extractions, physical extractions, and password
bypasses. An overview of the UFED Physical Analyzer software
will be complimented with a number of hands-on exercises in
the advanced analysis of evidentiary items. It should be noted
that times allocated to course content do not include course
introduction.

www.cellebritelearningcenter.com

Cellebrite Certified Physical Analyst (CCPA)

Time and Estimated Time

Description and Objectives

Media System Files and Encoding

In this module we will discuss the type of memory used in mobile

devices and how flash reads/writes, cleanses, and conducts data
maintenance.

180 Minutes (3 Hours)

Describe file systems used by mobile devices

Describe data encoding (Binary, Hexadecimal, ASCII, Unicode, Big
Endian/Little Endian, Nibble, and 7bit)
Describe flash media characteristics
Describe how data is encoded when written to the flash media

UFED Technology Overview and

Extractions
120 minutes (2 hours)

In this module, we focus on the operation and best practices of using

UFED solutions that are physically licensed. We explain the differences
between the UFED Touch device and UFED 4PC software and their
capability to perform extractions, conduct analysis and generate
reports.
File System Extraction
Physical Extraction
Identify differences in various UFED technologies (PC vs. Touch
Ultimate)
Explain different extraction types

UFED Physical Analyzer Overview

300 Minutes (5 Hours)

In this module, we will discuss UFED Physical Analyzer and its

capabilities to decode and analyze the contents extracted from mobile
devices.
Decode the contents extracted from mobile devices
Analyze the contents extracted from mobile devices
Understand UFED Physical Analyzer functionality and capabilities

Advanced Search Techniques

180 minutes (3 hours)

In this module, we will discuss and demonstrate advanced search

techniques by completing practical exercises. We will also demonstrate
how to use these features to quickly and efficiently assist in locating
elements of a crime.
Find (Strings, Bytes, Dates, SIM)
Regex (GREP)
7 Bit SMS PDU
Pattern
Code

Cellebrite Certified Physical Analyst (CCPA)

Time and Estimated Time

Description and Objectives

Verification and Validation of Findings

In this module, we discuss how to verify the data acquired from the
mobile device using a variety of techniques.

60 minutes (1 hour)

Hand scroll techniques

Third-party tools
Database verification and analysis

Plug-in Chain Manager

60 minutes (1 hour)

In this module, we will discuss using the Plug-in Chain Manager. We will
examine how to modify the Plug-in Chain Manager to extract data.
Discuss the Plug-in Chain Manager and its capabilities
Demonstrate your ability to use the Plug-in Chain Manager

Reporting on Technical Findings

60 Minutes (1 Hour)

In this module, you will learn about generating reports using the UFED
Physical Analyzer software.
Discuss reporting options within UFED Physical Analyzer
Create a report based on evidentiary items from a scenario

Certification Examination and Practical

120 minutes (2 hour)

The CCPA certification examination and practical assessment validates

the students understanding of advanced concepts in conducting
digital forensic analysis using UFED Physical Analyzer software.

To learn more, visit

www.cellebritelearningcenter.com
THE MATERIALS AND TOPICS PROVIDED HEREIN ARE PROVIDED ON AN AS IS AND AS AVAILABLE BASIS WITHOUT ANY WARRANTIES OF ANY KIND INCLUDING, BUT NOT
LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR GUARANTIES AS TO ITS ACCURACY OR COMPLETENESS. PLEASE NOTE THAT
SOME MATERIALS, TOPICS AND ITEMS PROVIDED HEREIN ARE SUBJECT TO CHANGES. CELLEBRITE MAKES NO WARRANTIES, EXPRESSED OR IMPLIED, FOR REGISTERED
TRADEMARKS OF CELLEBRITE IN THE UNITED STATES AND/OR OTHER COUNTRIES. OTHER TRADEMARKS REFERENCED ARE PROPERTY OF THEIR RESPECTIVE OWNERS.
APPLICABLE LAW MAY NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY TO YOU.

CCPA REV 06-16