Intermediate Mobile Phone Forensics

Title: Intermediate Mobile Phone Forensics
Year: May 2010 – Version 1.0
Duration: 1 week

Course Aim

By the end of this course the students will be able to:

  • Appreciate the use of appropriate tools and methods for physical examination of mobile phones.
  • Develop an understanding of mobile phone memories and operating systems as well as different methods needed to access to these devices in order to retrieve deleted data, hidden data or data which is otherwise hard to access.
  • Better assemble evidence for court that is clear and supportive of evidential needs even when devices are blocked, damaged, not functioning properly or otherwise hard to examine.


Students should have previously attended and passed the Core Skills Course and/or have experience with the appropriate forensic tools and procedures. They should have a good understanding on how GSM/3G networks operate and have assembled evidence for court. Students should also have read the course pre-read.

Students will need to be able to understand and communicate in English.

Small list of agenda / topics / main points

  • Getting up to speed
  • Cleaning/Repairing mobile phones
  • Introduction to Hex
  • Physical Examination

If you are interested in applying for this course please read following page