January 7-8, 2019 - Oxygen Forensics Headquarters, Alexandria, VA - Oxygen Forensic® Basic Investigator (OFBI)

Basic Information

Course: Oxygen Forensic® Basic Investigator (OFBI) (2 Days)
Instructor's Name: TBD
Date: January 7-8, 2019
Location: 901 N. Pitt St. Suite 100, Alexandria, VA , Oxygen Forensics Headquarters, Alexandria, VA
Cost: Request quote

 Oxygen Forensic Basic Investigator

Course Description

This course takes ahands-on approach to provide students with foundational concepts and practicalskills in Mobile Device Forensics, which can be leveraged to performforensically sound investigations against crimes involving the most complexmobile devices currently available in the market. Using modern tools andtechniques, students will learn how to conduct a structured investigationprocess to determine the nature of the crime and to produce results that areuseful in criminal or civil proceedings. The course will provide a basic walk-through on various phases of the mobile forensics process for both Androidand iOS based devices including forensically extracting, collecting, andanalyzing, data and producing and disseminating reports. The course goes overall the terminology involved with mobile devices.

Course Objectives

  • Gain knowledge on smart devices
  • Understand the mobile deviceforensic process
  • Know and recognize the legality ofmobile device forensics
  • Gain required knowledge to understandthe terminology around mobile devices
  • Understand what data can or cannotbe retrieved from mobile devices

Required Student Resources

Students will receive a manual during class that will contain the class content and worksheets. This class location will require the student to supply their own laptop for the training.  




Day 1



Mobile Devices

·         Mobile Phones

·         PDA (Personal Data Assistant)

·         GPS (Global Positioning System)

·         Tablet Devices

·         Smart Watches


Personal Information on Mobile Devices

·         Text and Short Messaging Service (SMS)

·         Contacts

·         Videos

·         Social Networking

·         Calls




·         E-Mail

·         Instant Messaging Applications

·         Web Browsing

·         Pictures



·         History

·         Key Features

What is Mobile Device Forensics?

·         History

·         How to preserve

·         Computer vs Mobile

·         Extraction Methods

·         Data that can be extracted

Sources of Data

·         Mobile Device

o   Internal storage

o   External storage (SD Card)

o   Subsciber Identity Module (SIM)

·         Computers

·         Cloud

·         Social Media

Operating Systems

·         Android (Google Play Store)

·         iOS – Non Jailbroken (Apple Store)

·         iOS – Jailbroken (Cydia Store)

·         Windows

·         Blackberry

Day 2


Mobile Forensic Process

·         Digital Investigations

o   Before

o   During

o   After

·         Building a forensics team

·         Policies

o   Standard Operating Procedure

o   Purpose

o   Scope


Process and Procedures

·         Seizure and Isolation

·         Collection

·         Analysis/Examination

·         Reporting/Presentation

·         Chain of Custody


·         Manual

·         Logical

·         File System

·         Physical

o   JTAG

o   Chip-Off

o   Micro Read

·         Brute Force


·         Procedural

·         Crime Scene

·         Acquisition

·         Integrity

·         Anti-Forensics


·         Types

·         Methods

·         Challenges

·         Tools to assist

Cloud Forensic

·         History

·         Impact on Mobile Forensics

·         Challenges

Intro to Drones (UAV)

·         Terms

·         Types

·         Data recovered

Oxygen Exam

·         Consists of 20 questions


Evaluation Procedures and GradingCriteria

Theevaluation will be assured through an overall exam at the end of the course. The participants of this trainingcourse will receive a certificate as a Oxygen Forensic Basic Investigator (OFBI)after passing the exam.

Attendance Statement

Students cannot miss more than 1hour of class to receive a certificate of attendance.