Training Courses.

This three-day instructor-led training event is geared toward students that have a working familiarity with mobile device extraction and analysis. Students will learn initial extraction methodology of an iDevice and Android device and follow up by importing multiple extraction formats of Android, Apple and other device and data types. While developing workflows that enable students to return to their environments to immediately apply new ideas, the course also prepares the student for the Oxygen Forensic Certification program and lays the foundation for the OFAA – Advanced Analysis course.

This one-day instructor-led training event is geared toward students that have a working familiarity with Oxygen Forensic® Detective and are ready to expand their investigations to cloud-based data. Students will use the Oxygen Forensic® KeyScout to gather credential-based target data from computer hard-drives and the Oxygen Forensic® Cloud Extractor to gather cloud-based target data from many platforms – including Amazon, Google, WhatsApp, and Apple services. Students will learn to address 2FA (two-factor authentication) and alternate authentication methods.

This three-day instructor-led training event is geared toward students entering the mobile forensic arena that are ready to begin learning the art and science of extracting data from phones or to broaden already existing knowledge about Oxygen Forensic® Extractor. The course focuses on the physical, logical and OxyAgent methods of data extraction from Android, iOS and other devices (drone, UICC, SD card) using the Oxygen Forensic® Extractor, a component of the Oxygen Forensic® Detective. Other topics covered include bypassing screen lock pins, passcodes, and swipe patterns; using ADB (Android Debug Bridge) commands; upgrading and downgrading firmware and application versions, and brute force attacking secure start protection against FDE (full disk encryption) and FBE (file-based encryption).

This one-day instructor-led training event is geared toward students that have a working familiarity with Oxygen Forensic® Detective and are ready to prepare to execute on-scene warrants, knock-and-talks, consent to search, or roadside interrogation. This course covers the Oxygen Forensic® OxyAgent and iOS Agent for on-scene mobile data triage purposes to ensure the ability to forensically collect Android and iOS artifacts. Oxygen Forensic® OxyAgent allows a user to collect Android mobile data with an on-the-go, logical extraction to include third-party Applications. During this course, students will learn how to prepare an on-the-go tool armed with the OxyAgent, gain permissions on the device, and selectively extract data or make a full logical acquisition of data. Oxygen Forensic® iOS Agent is an app for iOS devices that is installed directly to the device as a regular unprivileged user app. iOS Agent allows for the extraction of data, including available deleted files and data, from Apple devices without having to jailbreak the device. This module will educate students on the full potential of iOS Agent and its configuration and implementation – focusing on data collection without putting the target device at risk.

This one-day instructor-led training event is geared toward students that have a working familiarity with mobile device extraction and analysis and focuses on extraction, use case, and reporting capabilities of the Oxygen Forensic® Detective. This course takes a deep dive into the Oxygen Forensic® KeyScout performing dead box data recovery from hard drive computer forensic images and live machines. Students learn to customize search paths, create custom search profiles, to mine user credentials and tokens for cloud platform access, and save results for analysis in Oxygen Forensic® Detective.

This one‐day on-demand training event is geared toward students that have a working familiarity with Oxygen Forensic® Detective. Students will learn the process of producing professional and accurate reports, supplying supporting documentation, and preparedness to deliver their findings in a more understandable way to the end user whether it is a manager, client, or a jury.

This two-day instructor-led training event is geared toward students that have a working familiarity with Oxygen Forensic® Detective. This course will demystify low-level SQLite data analysis and recovery using our built-in and external SQLite Database Viewers. In this class, you will learn what SQLite is, and how to analyze and perform executable tasks on the many complex tables that make up a single database file to create reportable results. We will deep-dive into a better understanding of the usefulness and use cases of SQLite scripting to granularize your application-level analysis.

This one-day instructor-led training event will deliver methodology to locate, recover, and process all image types in extracted datasets. During this course, students will learn to utilize Facial Categorization, subsequently searching faces found to quickly locate suspects such as registered sex offenders; process all images using Image Categorization to locate everything from CSAM images to license plates, maps, currency, and weapons while also performing searches of text values inside of images and screenshots using Optical Character Recognition. Diving further into the datasets, students will learn how to search HEX to locate potential hidden images.

The OFDV (Oxygen Forensic Detective Viewer) course centers on education for non-technical investigation review of collected mobile device and computer data using an interface modeled on Oxygen Forensic Detective. This platform allows responsive data to be searched, tagged, and reported on by the personnel that knows the most about it, putting the correct work in the correct hands. The platform also serves as a review environment for any facet of the corporate or legal process. The Viewer platform is an available component of Oxygen Forensic® Detective.

This one-day instructor-led training event is geared toward students looking to gain insight into the world of Unmanned Aerial Vehicle (UAV) forensics. Using Oxygen Forensic© Detective, attendees will learn best practices for data extraction from UAVs, UAV mobile device applications and associated cloud account data. Students will examine these data collections to build a forensic report detailing all activity of a UAV flight including analysis of associated images and movies on SD-cards as well as flight-control black box data.

This three-day instructor-led training event is a direct successor to the three-day OFBC course and continues with deep dives into Oxygen Forensic® Detective analytics, database parsing, lost data recovery, alternate data sets, and advanced tools such as the Call Data Record expert, the SQLite and Property list viewers, and Oxygen Maps. Students will investigate IoT devices, take deep dives into application cache database files with the SQLite database and Property list viewers, and learn to aggregate and correlate data from multiple sources to enhance the overall investigation in scenario-based exercises.