FOR585: Advanced Smartphone Forensics

• 

  Learn how to reconstruct events surrounding a crime using information from smartphones, including timeline development and link analysis (e.g., who communicated with whom, where, and when)

• 

  Know how to detect smartphones compromised by malware and spyware using forensic methods; along with decompile and analyse mobile malware using open-source tools

• 

  Learn to perform advanced forensic examinations of data structures on smartphones by diving deeper into underlying data structures that many tools do not interpret

• 

  Understand how to analyse SQLite databases and raw data dumps from smartphones to recover deleted information and perform advanced data-carving techniques on smartphones to validate results and extract missing or deleted data

• 

  Apply the knowledge you acquire during the course to conduct a full-day smartphone capstone event involving multiple devices and modelled after real-world smartphone investigations