SNS F585 Advanced Smartphone Forensics - GIAC Advanced Smartphone Forensics GASF
 
Course Description
This course teaches the collection and analysis of data from iOS and Android devices, including encrypted and deleted content. Learners focus on mobile cloud and application artifacts that are critical to modern investigations, enabling accurate reconstruction of user activity incidents and evidence relevant to enterprise security and legal matters.
 
What You Will Learn
Perform physical and logical acquisition of mobile devices using sound forensic practices
Decrypt parse and analyze secure messaging data and application containers
Extract and analyze cloud backups account data and location information
Correlate mobile device artifacts with cloud and enterprise data sources
Analyze artifacts from wearables and connected devices
Maintain chain of custody integrity throughout evidence collection and analysis
 
Who This Course Is For
This course is designed for digital forensic analysts incident responders investigators security engineers legal support teams and technical professionals responsible for mobile device investigations and evidence handling.
 
Hands On Training Experience
Learners complete extensive hands on labs using realistic iOS and Android data sets. Exercises include data extraction artifact analysis timeline reconstruction and professional reporting, culminating in a comprehensive mobile forensic case that mirrors real world investigative workflows.
 
Course Outcomes
Recover critical evidence from mobile devices for incident response and litigation support
Strengthen investigations through mobile cloud and application artifact correlation
Build internal mobile forensics capabilities and reduce reliance on external services
Ensure defensible evidence handling and documentation practices