Oct 19, 2019
CIS 292 - Mobile Device Forensics
This course covers the application of advanced digital forensics analysis concepts to mobile devices. Students will learn the proper way to acquire and analyze evidence from a variety of devices that utilize the Android, iOS, and Chrome operating systems, and will be exposed to a variety of mobile device forensics hardware and software. Course may include industry certification exam preparation.
Prerequisite CIS 272 with a GPA of at least 2.5 or equivalent.
Course-level Learning Objectives (CLOs)
On successful completion of this course, students will be able to:
- Compare and contrast the capabilities of various commercial hardware and software tools such as Cellebrite, Oxygen Forensics, MOBILedit, and MPE+.
- Describe the differences between GSM, CDMA, and iDEN Handsets
- Describe the components of a cellular network
- Demonstrate the ability to perform logical and physical acquisition of evidence from smartphones and tablets
- Demonstrate knowledge of common mobile device security methods and the procedures used to bypass.
- Use a variety of hardware and software to recover keyboard caches, deleted browser caches, call history, map tiles, email, SMS/MMS messages, and voicemail.
- Demonstrate an understanding of the SQLite database structure, B-Tree pages and how records are stored within them
- Utilize various methods for analysis of Subscriber Identify Modules
- Demonstrate how to interpret Call Detail Records
- Describe the methods used for JTAG, Chip-Off, ISP/Direct eMMC, and manual Android data extraction
[Add to Personal Catalog]