Cellebrite Certifications
Cellebrite’s new generation mobile forensic solution, UFED Touch2 Ultimate, UFED 4PC, UFED TK, and UFED InField Kiosk, enables the most technologically advanced extraction, decoding, analysis and reporting of mobile data. Given how close the two are the Cellebrite adds portability without the need for a laptop, so that may give it an edge if you need to do work on site.
Cellebrite Laptops & Desktops Driver Download
The Cellebrite Certified Operator (CCO) course is a 2-day intermediate level certification program which builds on the CMFF course concepts. This course is designed for participants tasked with extracting data in a forensically sound manner using UFED Touch or UFED 4PC. Cellebrite UFED The industry standard for accessing mobile data Cellebrite Physical Analyzer From encrypted data to actionable intelligence Cellebrite UFED Cloud Unlock cloud-based evidence to solve case sooner Cellebrite Frontliner Collecting with confidence on the frontline Cellebrite Responder Getting real-time data for faster response Cellebrite Premium Premium access to all iOS and high.
Cellebrite Laptops & Desktops Driver Downloads
What does it mean to be certified?A certification credential is awarded to certify that recipient's proficiency as measured by written and practical assessments.
Cellebrite requires a score of 80% or better on all examinations and practical skills assessments to achieve a passing score for all certifications (individual course requirements may vary).
Why is certification important?When introducing evidence in criminal and civil proceedings, examiners holding valid Cellebrite Certified Operator (CCO), Cellebrite Certified Physical Analyst (CCPA), and Cellebrite Certified Mobile Examiner (CCME) certifications are preferred over those who cannot prove their competency.
Some jurisdictions require those who will be introducing evidence in legal proceedings to possess appropriate certifications
As explained previously, when a student earns certifications from Cellebrite, it means they have demonstrated their ability to meet or exceed competencies for that credential to be issued to them.
Certified BlackLight Examiner (CBE) certificants - Please review details about your certification here
This includes:
- Cellebrite Certified Mobile Examiner (CCME)
Advanced and expert classes offering certifications do not expire.
Certificants failing to recertify by their expiration date will be classified as expired.When a certification expires, a student is granted a redemption period of 24 months (with exception of CCME - 12 months).
To renew expired core certifications during the redemption period, the holder of that certification must register for and successfully complete the appropriate Recertification Refresher Course. This does not include an exam.
Certificants who fail to renew expired certifications within the redemption period must repeat the program in its entirety, including payment of any training, administrative and examination fees.
To be eligible to recertify a CCO certification, a certification must be current(or expired no more than 24 months)
If a certificant has only earned CCO, they can renew by one of two ways:
- Complete the On Demand CCO Only Recertification Class (details below); or
- Attend and achieve CCPA
To be eligible to recertify a CCPA certification, a certification must be current(or expired no more than 24 months)
If the certificant has earned the CCPA certification, they can renew by one of three ways:
- Complete the on-demand CCPA Only Recertification Class (details below); or
- If they also achieved CCO, they will complete the CCO+CCPA version of the on-demand Recertification Class; or
- Achieve the CCME certification
To be eligible to recertify a CCME certification, a certification must be current(or expired no more than 12 months)
If the certificant has earned CCME, they can renew only one way:
- Upload Continuing Professional Development: Cellebrite requires documentation verifying attendance at a minimum of 21 hours of continuing professional development related to mobile device or digital forensics from industry recognized organizations - this does not have to be our training courses.
- Upload Work Experience: Upon submitting the recertification application, Cellebrite requires documentation that the certificant has examined or supervised the examination of at least three (3) mobile devices during the previous certification period.
Please be advised that these certifications have been discontinued, but will remain valid until expiration.
- Current certifications will remain valid until the expiration date on currently issued credentials
- Upon renewal, CBE certifications will be issued in line with all other certifications issued by Cellebrite
- Therefore, renewed CBE certifications shall be issued for two years when you renew
- The CBE recertification schema will be published on this page when available
Cellebrite Certified Operator (CCO)
It aims to teach data extraction on a variety of devices to personnel including technically savvy investigators, digital forensic examiners, IT staff, internal affairs investigators, first responders and other staff members designated to handle extraction of digital evidence.
Course Content
Mobile Device Technology Overview
- Identify mobile device hardware and operating systems.
- Discuss how mobile devices communicate.
- Discuss how technology affects network capacity.
- Learn how devices and subscribers are identified on networks.
Forensic Handling of Mobile Devices
- Recognize legal considerations for seizing and searching devices
- Identify evidence handling procedures on scenes involving mobile devices
- Use UFED Phone Detective to identify a specific mobile device
- Recognize various locking mechanisms found on mobile devices
- Practice applying best practices when seizing devices to a mock scenario
UFED Touch and UFED 4PC
- Learn about the components for the UFED Touch and UFED 4PC
- Learn how to license UFED technology
- Learn to update the firmware
- Install UFED 4PC
- Configure UFED Touch and/or UFED 4PC
Cellebrite Extraction Methodology
- Identify best practices for digital forensic extractions
- Practice forensically sterilizing media
- Complete SIM card extractions using UFED Touch/4PC
- Conduct SD card extractions in a forensically sound manner
- Use the UFED Touch/4PC and Physical Analyzer to conduct device extractions
- Complete the removal of a passcode from a locked device using UFED Touch/4PC
- Describe how to use UFED Camera Services
Introduction to Analyzing User Data
- Basic Physical Analyzer Configuration
- Open extractions with Physical Analyzer
- View data in Physical Analyzer
- Learn to bookmark items of interest
Reporting on Technical Findings
- Understand the fundamental elements of a report
- Understand reporting options within Physical Analyzer
- Create a report based on evidentiary items
Participants are offered an optional certification examination at the conclusion of class. Successful completion of the exam results in a Cellebrite Certified Operator (CCO) certification credential. Successful course completion without attempting or passing the optional exam and skill challenge results in a certificate of attendance.
Attaining the CCO certification credential, while optional, is a prerequisite for taking the Cellebrite Certified Mobile Examiner (CCME) test. Demonstration of mastery of these concepts is one of the prerequisites for students desiring to take the Cellebrite Certified Mobile Examiner (CCME) certification examination. Students considering the CCME certification credential are also required to complete the Cellebrite Mobile Forensic Fundamentals (CMFF) course or Cellebrite Mobile Forensic Fundamentals (CMFF) Test Out Option and the Cellebrite Certified Physical Analyst (CCPA)