October 21-22, 2019 - Teel Technologies - Oxygen Forensic® Basic Investigator (OFBI)

Basic Information

Course: Oxygen Forensic® Basic Investigator (OFBI) (2 Days)
Instructor's Name: TBD
Date: October 21-22, 2019
Location: 22 Knight Street Norwalk, CT 06851, Teel Technologies
Cost: Request quote

 Oxygen Forensic Basic Investigator

Course Description

This course takes a hands-on approach to provide students with foundational concepts and practical skills in Mobile Device Forensics, which can be leveraged to perform forensically sound investigations against crimes involving the most complex mobile devices currently available in the market. Using modern tools and techniques, students will learn how to conduct a structured investigation process to determine the nature of the crime and to produce results that are useful in criminal or civil proceedings. The course will provide a basic walk-through on various phases of the mobile forensics process for both Android and iOS based devices including forensically extracting, collecting, and analyzing, data and producing and disseminating reports. The course goes over all the terminology involved with mobile devices.

Course Objectives

  • Gain knowledge on smart devices
  • Understand the mobile device forensic process
  • Know and recognize the legality of mobile device forensics
  • Gain required knowledge to understand the terminology around mobile devices
  • Understand what data can or cannot be retrieved from mobile devices

Required Student Resources

Students will receive a manual during class that will contain the class content and worksheets. This class location will require the student to supply their own laptop for the training.   




Day 1



Mobile Devices

·         Mobile Phones

·         PDA (Personal Data Assistant)

·         GPS (Global Positioning System)

·         Tablet Devices

·         Smart Watches


Personal Information on Mobile Devices

·         Text and Short Messaging Service (SMS)

·         Contacts

·         Videos

·         Social Networking

·         Calls




·         E-Mail

·         Instant Messaging Applications

·         Web Browsing

·         Pictures



·         History

·         Key Features

What is Mobile Device Forensics?

·         History

·         How to preserve

·         Computer vs Mobile

·         Extraction Methods

·         Data that can be extracted

Sources of Data

·         Mobile Device

o   Internal storage

o   External storage (SD Card)

o   Subsciber Identity Module (SIM)

·         Computers

·         Cloud

·         Social Media

Operating Systems

·         Android (Google Play Store)

·         iOS – Non Jailbroken (Apple Store)

·         iOS – Jailbroken (Cydia Store)

·         Windows

·         Blackberry

Day 2


Mobile Forensic Process

·         Digital Investigations

o   Before

o   During

o   After

·         Building a forensics team

·         Policies

o   Standard Operating Procedure

o   Purpose

o   Scope


Process and Procedures

·         Seizure and Isolation

·         Collection

·         Analysis/Examination

·         Reporting/Presentation

·         Chain of Custody


·         Manual

·         Logical

·         File System

·         Physical

o   JTAG

o   Chip-Off

o   Micro Read

·         Brute Force


·         Procedural

·         Crime Scene

·         Acquisition

·         Integrity

·         Anti-Forensics


·         Types

·         Methods

·         Challenges

·         Tools to assist

Cloud Forensic

·         History

·         Impact on Mobile Forensics

·         Challenges

Intro to Drones (UAV)

·         Terms

·         Types

·         Data recovered

Oxygen Exam

·         Consists of 20 questions


Evaluation Procedures and Grading Criteria

The evaluation will be assured through an overall exam at the end of the course. The participants of this training course will receive a certificate as a Oxygen Forensic Basic Investigator (OFBI) after passing the exam.

Attendance Statement

Students cannot miss more than 1 hour of class to receive a certificate of attendance.