Drone Takeoff


Vendor Specific Training

Learn the foundational knowledge and hands-on skills needed to become an Oxygen Forensic Expert. This vendor-specific, hands-on training course will provide a start to finish education on the use of Oxygen Forensic® Detective. Students will learn how to access critical data stored on mobile devices, drones and cloud data, then conduct analysis of the extracted data using Oxygen Forensic® Detective.

Course Description

Students will obtain a start to finish education on the use of Oxygen Forensic® Detective.  The course adds to the Basic and Expert course by introducing advanced methods of Smart Device collections and data analysis. Students will examine collect and analyze data from iOS, Android, and Windows Phone smart devices.  Students will work to obtain physical images, understand file system formats, storage methods and evidence locations. Students receive training and instruction on Cloud Storage and extraction techniques using Oxygen Forensic® Detective.  SQLite database data is extremely important to today’s smart device examinations.  Not only will students receive training on the SQLite database format and creating SQL queries, but Property Lists, recovering deleted data, write-ahead-logs, shared-memory-files and interpreting database artifacts using the SQLite Viewer and secondary tools are covered. 

Course Objectives

  • Gain extensive knowledge on today’s smart devices including iOS, Android and Windows Phone.

  • Understand file system formats and data types found within major smart device operating systems.

  • Provide information to students to assist in locating, processing and recovering artifacts from the smart device file system.

  • Gain required knowledge to create advanced SQL queries to recover data from unsupported app and cache files within the smart device file system.

  • Students will gain valuable knowledge during the training that will assist in passing a certification examination


Required Student Resources

Students will receive a manual before the start of class that will contain the class content and worksheets.


  • On-site training requires each student to bring their own laptop computer.

  • Online - Instructor led training requires the student to have the following:

    • Microphone headset for communication

    • Android and iOS device for hands on activities (optional)



  • Finds passwords to encrypted backups and images

  • Bypasses screen lock on popular Android OS devices

  • Acquires location history and media files from drones

  • Extracts data from cloud services: iCloud, Google, Microsoft, etc.

  • Acquires data from IoT devices and smartwatches

  • Offers import and analysis of call data records

©2020 by Cybercrime Forensics Training Center.