Training Courses

Digital Evidence Processing

Training is provided by Chicago RCFL examiners.  Investigators learn how to collect and preserve digital evidence, and to integrate digital evidence into a case. Additionally, investigators are exposed to the advanced tools and techniques used by the CGRCFL, so they can better understand what to expect from a forensics examination. This course requires no prerequisites, but attendees should have a working knowledge of computers.


Image Scan Training

Training is provided by Chicago RCFL examiners. The Federal Bureau of Investigation's (FBI) Computer Analysis Response Team (CART) developed the Image Scan system to help investigators locate the presence of picture files that may contain contraband on a computer. This system allows the investigator to view a variety of graphic formats during a consensual search, and protects valuable digital evidence by booting up a computer using the Linux operating system. After mounting the hard drive in a “read only” manner, Image Scan prompts the investigator to search for picture files only. During this process, the tool logs every step taken by the investigator, further documenting what occurred during the search process.
Law enforcement personnel that conduct on-site investigations for child pornography are encouraged to take the Image Scan training. 


Upcoming Vendor Classes*

CELLEBRITE CERTIFIED OPERATOR + CELLEBRITE CERTIFIED PHYSICAL ANALYST [CCO & CCPA]

June 12th- 16th, 2017

The Cellebrite Certified Mobile Examiners Course is designed for the intermediate and advanced investigator / digital forensic examiner. This 5-day course combines the curriculum from the Cellebrite Certified Operator (CCO) and the Cellebrite Certified Physical Analyst (CCPA) Courses providing the participant with an intense exposure to Cellebrite UFED, Physical Analyzer Software and all of the core competencies associated with the examination of mobile devices using Cellebrite’s Tools and methodology. During the course, written exams and practical skill assessments will be administered. After successfully passing these exams, students earn the Cellebrite Certified Operator (CCO) and the Cellebrite Certified Physical Analyst (CCPA) certification credentials. Successful class completion results in a certificate of completion and demonstration of mastery of these concepts is one of the prerequisites for students desiring to take the Cellebrite Certified Mobile Examiner (CCME) certification examination. Students considering the CCME Certification are required to complete the Cellebrite Mobile Forensic Fundamentals (CMFF) course, Cellebrite Certified Operator (CCO) course and the Cellebrite Certified Physical Analyst (CCPA) course.

The Cellebrite Advanced Smartphone Analysis (CASA) class is an expert-level four day, twenty eight hour course lead by Cellebrite Certfied Instructors (CCIs). During this Expert Series course students will take an in-depth look into the challenges presented by iOS, Android and Windows Mobile devices. This hands-on class focuses on forensic recovery of application data in SQLite databases, defeating passcodes. In addition, they will learn about analyzing user data in iOS, Android and Windows Mobile devices. In addition to Cellebrite Physical Analyzer software, a variety of forensic investigative methods are used to get the information you need.

MAGNET FORENSICS AXIOM EXAMINATIONS
Aug 28th - 31st, 2017
Link not yet available, please contact Magnet Forensics for additional information.

Cellebrite’s Advanced JTAG Extraction (CAJE) training is an advanced- level four day course lead by Cellebrite Certifed Instructors (CCIs). During this course, participants will learn about the JTAG process, electrical theory, methodologies, and purpose as well as understand the equipment and accessories necessary for successful JTAG extractions. Instructors will help attendees to not only develop, but also to hone fundamental soldering skills, gain practical knowledge with hands-on practice as well as share best practices and legal considerations for processing JTAG extractions. Additionally, participants will learn how to fully leverage the Physical Analyzer.

Sep 25th - 29th, 2017

The Cellebrite Certified Mobile Examiners Course is designed for the intermediate and advanced investigator / digital forensic examiner. This 5-day course combines the curriculum from the Cellebrite Certified Operator (CCO) and the Cellebrite Certified Physical Analyst (CCPA) Courses providing the participant with an intense exposure to Cellebrite UFED, Physical Analyzer Software and all of the core competencies associated with the examination of mobile devices using Cellebrite’s Tools and methodology. During the course, written exams and practical skill assessments will be administered. After successfully passing these exams, students earn the Cellebrite Certified Operator (CCO) and the Cellebrite Certified Physical Analyst (CCPA) certification credentials. Successful class completion results in a certificate of completion and demonstration of mastery of these concepts is one of the prerequisites for students desiring to take the Cellebrite Certified Mobile Examiner (CCME) certification examination. Students considering the CCME Certification are required to complete the Cellebrite Mobile Forensic Fundamentals (CMFF) course, Cellebrite Certified Operator (CCO) course and the Cellebrite Certified Physical Analyst (CCPA) course.

ACCESSDATA FTK BOOTCAMP - Nov 14th - 16th, 2017

*The CGRCFL is providing a training facility for these vendor courses.  The CGRCFL does not endorse any of these training classes or the associated vendor products.