GLOBAL FORENSIC TRAINING

Cellebrite JTAG Extraction and Decoding (CJED)

COURSE DESCRIPTION

>>>

Level
Advanced
Length
3 days
Delivery Mode
Instructor Led
Training

This 3-day course is designed for the intermediate and advanced

investigator / digital forensic examiner. This course focuses on
the JTAG process, methodologies, purpose, and origins as well
as an overview of the equipment and accessories necessary for
successful JTAG extractions. A number of hands-on exercises in
soldering, JTAG software/hardware configuration, JTAG extractions
and decoding with the UFED Physical Analyzer software
compliment this instructor led training. As part of the course
students will receive a RIFF brand JTAG box, Molex adapter kit,
toolkit, and Cellebrite solder practice board It should be noted
that times allocated to course content do not include course
introduction.

www.cellebritelearningcenter.com

Cellebrite JTAG Extraction and Decoding (CJED)

Time and Estimated Time

Description and Objectives

Introduction to JTAG Theory

In this module we will discuss the foundations of the JTAG process to include
the advantages and disadvantages when implemented in mobile device
examinations.

90 Minutes (1.5 Hours)

Describe the JTAG process

Identify appropriate scenarios to implement the JTAG process
Discuss advantages and disadvantages of the JTAG process
Describe critical need-to-know elements of JTAG

Soldering Techniques
120 Minutes (2 Hours)

In this module, we focus on JTAG soldering techniques and best practices. We

explain the recommended techniques to make a successful solder connection
and laboratory safety considerations.
Explain JTAG soldering techniques
Discuss safety considerations
Demonstrate recommended soldering techniques.
Demonstrate solder removal techniques.

Riff JTAG Box

240 Minutes (4 Hours)

In this module, we will discuss the proper setup and operation of the Riff JTAG
Box to perform JTAG acquisitions. We will discuss software installation and
updating as well as hardware operation.
Install and update RIFF Box software
Configure hardware and software
Perform a JTAG acquisition with RIFF JTAG Box

Forensic Process
60 Minutes (1 Hour)

In this module, we discuss the recommended best practices for the JTAG
process. We explain how to decode JTAG acquisitions using UFED Physical
Analyzer, and legal considerations related to JTAG.
Explain JTAG best practices
Decode JTAG acquisitions with UFED Physical Analyzer
Discuss JTAG legal considerations

Tools and Equipment

60 Minutes (1 Hour)

In this module, we will discuss the different JTAG Boxes available on the
market and their functionality. We will also provide an overview of the
functions and benefits associated with JTAG accessories.
Describe JTAG boxes and functionality
Discuss JTAG accessories
Identify JTAG resources

Molex Connectors for JTAG

120 Minutes (2 Hours)

In this module, you will learn and demonstrate JTAG acquisitions using Molex
connections by completing a JTAG acquisition from start to finish.
Describe Molex connectors
Explain Molex JTAG acquisitions

Cellebrite JTAG Extraction and Decoding (CJED)

Time and Estimated Time

Description and Objectives

Identify Molex JTAG connections
Perform JTAG Molex acquisition

Reference and Research

30 Minutes (.5 Hour)

In this module, we will discuss research techniques to determine case specific

JTAG viability.
Determine mobile device JTAG viability
Discuss JTAG reference and research resources

HTC Eris Walk Through

180 Minutes (3 Hours)

In this module, we will discuss and demonstrate a JTAG acquisition from start
to finish via a soldered connection with a handset.
Perform JTAG process from start to finish
Acquire JTAG physical acquisition of handset via soldered connections

Introduction to UFED Physical

Analyzer

In this module, we will discuss UFED Physical Analyzer and its capabilities to
decode and analyze the contents extracted from mobile devices.

90 Minutes (1.5 Hours)

Decode the contents extracted from mobile devices

Analyze the contents extracted from mobile devices
Understand UFED Physical Analyzer functionality and capabilities

Working with JTAG Extractions

180 Minutes (3 Hours)

In this module, we will discuss and demonstrate using the Plug-in Chain
Manager to decode JTAG acquisitions. We will examine the Plug-in Chain
Manager to extract data with modified, generic, and dedicated chains.
Discuss the Plug-in Chain Manager and its capabilities
Demonstrate your ability to use the Plug-in Chain Manager to decode JTAG
acquisitions

Validation and Reporting on

Technical Findings

In this module, you will learn about generating reports using the UFED
Physical Analyzer software.

60 Minutes (1 Hour)

Discuss reporting options within UFED Physical Analyzer

Create a report based on evidentiary items from a scenario

To learn more, visit

www.cellebritelearningcenter.com
THE MATERIALS AND TOPICS PROVIDED HEREIN ARE PROVIDED ON AN AS IS AND AS AVAILABLE BASIS WITHOUT ANY WARRANTIES OF ANY KIND INCLUDING, BUT NOT
LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR GUARANTIES AS TO ITS ACCURACY OR COMPLETENESS. PLEASE NOTE THAT
SOME MATERIALS, TOPICS AND ITEMS PROVIDED HEREIN ARE SUBJECT TO CHANGES. CELLEBRITE MAKES NO WARRANTIES, EXPRESSED OR IMPLIED, FOR REGISTERED
TRADEMARKS OF CELLEBRITE IN THE UNITED STATES AND/OR OTHER COUNTRIES. OTHER TRADEMARKS REFERENCED ARE PROPERTY OF THEIR RESPECTIVE OWNERS.
APPLICABLE LAW MAY NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY TO YOU.