Oxygen Forensics Training

The Oxygen Forensic Training course introduces students to advanced methods of Smart Device collections and data analysis. Students will examine, collect and analyze data from iOS, Android, and Windows Phone smart devices. Extensive work will be conducted: obtaining physical images, understanding file system formats, storage methods and evidence locations. Students will also receive training on; the SQLite database format, creating SQL queries, property lists, recovering deleted data, write-ahead-logs, shared-memory-files and interpreting database artifacts using the SQLite Viewer and secondary tools.