Contact information
London (UK) Office
22 Portman Square, Marylebone, London W1H 7BG, UK
Istanbul (Turkey) Office
19 Mayıs Mahallesi, 19 Mayis Street No 2 Sisli
This practical-focused programme provides participants with the knowledge and hands-on skills required to conduct mobile phone forensic investigations. The course covers the identification, preservation, acquisition, examination, analysis and reporting of digital evidence from mobile devices, with particular emphasis on Android and iOS platforms.
The programme combines theoretical concepts with extensive practical exercises, case studies and simulated forensic investigations.
Understand the principles of mobile phone forensics and digital evidence.
Apply appropriate procedures for preserving and acquiring mobile evidence.
Examine Android and iOS devices and forensic datasets.
Analyse calls, messages, applications, browser activity and media.
Examine location information and metadata.
Identify and analyse deleted or recoverable data.
Reconstruct mobile-device activity and timelines.
Correlate evidence from multiple sources.
Prepare professional mobile forensic investigation reports.
Present and explain forensic findings.
Digital Forensic Investigators
Cybercrime Investigators
Law Enforcement Personnel
Cybersecurity Professionals
IT Security Specialists
Intelligence and Security Personnel
Fraud Investigators
Incident Response Professionals
Corporate Investigators
Government and Regulatory Investigators
Digital forensics principles
Mobile forensic investigation process
Mobile device architecture
Android and iOS overview
Types and sources of mobile evidence
Evidence preservation and chain of custody
Practical introduction to forensic tools and evidence handling
Mobile evidence acquisition principles
Logical, file-system and physical acquisition concepts
Forensic imaging and data extraction
Evidence verification and integrity
Practical mobile acquisition exercises
Examination of forensic datasets
Android forensic artefacts
iOS forensic artefacts
Mobile application data
Databases and file systems
Backups and extracted data
Practical Android and iOS forensic examination
Call logs, SMS and contacts
Messaging applications
Browser and internet activity
Social media and application artefacts
Photos, videos and metadata
Location and GPS evidence
Practical data analysis and timeline reconstruction
Deleted and recoverable data
Evidence correlation and timeline analysis
Complete simulated mobile forensic investigation
Identification and interpretation of key evidence
Forensic report preparation
Presentation of findings
Final practical assessment
Advanced mobile artefacts
Application databases
System and user activity
Advanced evidence searching
Practical examination of complex forensic datasets
Case-based investigation exercise
Advanced communication analysis
Messaging and application evidence
Location and geolocation artefacts
Media and metadata analysis
Evidence correlation
Practical investigation scenario
Deleted data and data remnants
Database and file recovery concepts
Advanced searching and filtering
Timeline reconstruction
Correlating multiple evidence sources
Practical advanced investigation
Investigation planning
Evidence examination and analysis
Communications and application analysis
Media and location analysis
Timeline development
Practical end-to-end forensic investigation
Forensic report structure
Documenting findings and methodology
Evidence presentation
Professional and legal considerations
Final practical case investigation
Presentation of forensic findings
Final assessment and course review
