CIS 292 - Mobile Device Forensics

5 Credits
This course covers the application of advanced digital forensics analysis concepts to mobile devices. Students will learn the proper way to acquire and analyze evidence from a variety of devices that utilize the Android, iOS, and Chrome operating systems, and will be exposed to a variety of mobile device forensics hardware and software. Course may include industry certification exam preparation.
Prerequisite CIS 272 with a GPA of at least 2.5 or equivalent.
Course-level Learning Objectives (CLOs)
On successful completion of this course, students will be able to:

1. Compare and contrast the capabilities of various commercial hardware and software tools such as Cellebrite, Oxygen Forensics, MOBILedit, and MPE+.
2. Describe the differences between GSM, CDMA, and iDEN Handsets
3. Describe the components of a cellular network
4. Demonstrate the ability to perform logical and physical acquisition of evidence from smartphones and tablets
5. Demonstrate knowledge of common mobile device security methods and the procedures used to bypass.
6. Use a variety of hardware and software to recover keyboard caches, deleted browser caches, call history, map tiles, email, SMS/MMS messages, and voicemail.
7. Demonstrate an understanding of the SQLite database structure, B-Tree pages and how records are stored within them
8. Utilize various methods for analysis of Subscriber Identify Modules
9. Demonstrate how to interpret Call Detail Records
10. Describe the methods used for JTAG, Chip-Off, ISP/Direct eMMC, and manual Android data extraction