Learn to acquire and analyse mobile data with practical tools and techniques used in Android and iOS forensic investigations.

This module introduces key concepts and practical techniques for mobile forensics, focusing on both Android and iOS platforms. You will learn how to acquire and preserve mobile evidence, understand the unique structure of these filesystems and architecture, identify valuable artefacts such as messages, location data, app activity, and more. Through realistic mobile captures and interactive scenarios, you’ll gain practical experience with forensic tools and methods used in the industry. By the end of this module, you will be equipped with the knowledge and skills to perform effective mobile analysis as part of forensic investigations or incident response processes.

Mobile Acquisition

Prepare for mobile acquisition with the challenges and methods used throughout the process.

Android Analysis

Dive deep into the Android OS and learn how to examine from a forensics point of view.

iOS Analysis

Discover the forensic artefacts present within iOS.

Topic Rewind Recap

Lock in what you learned with a recap. Earn points and keep your streak.

Need to know

DFIR Essentials

Gain insights into DFIR practices involving ethical approaches, and learn how to analyse forensic artefacts.

Next steps

Memory Analysis

Learn how to analyse volatile memory to detect suspicious activity, track user behaviour, and investigate network threats through hands-on labs.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.

Mobile Analysis

Mobile Acquisition

Android Analysis

iOS Analysis

Topic Rewind Recap