CCRS – Cellebrite Certified Recovery Specialist Certification
Cellebrite Training is pleased to announce that the first of our three new certifications is active.
Cellebrite Certified Recovery Specialist (CCRS), our newest certification, prepares practitioners with the knowledge, skills, and abilities to identify potential electronic evidence, properly collect data and extract data on multiple digital devices – including smart devices, vehicle GPS, drones, IoT, and many others.
Your educational journey is important to us, and collectively through your feedback and our team’s endless hours continuing to keep up with the latest trends and the number of new techniques, we have put together the below series of courses that will change the way you work and expand your knowledge endlessly so you really get the most out of learning with us.
What Does It Mean To Be Certified?
Getting certified at Cellebrite means that as a student with us you have demonstrated your ability to meet or exceed competencies for a specific credential. A certification credential is awarded to certify that recipient’s ability, as measured by written and practical assessments.
Why Is Certification Important?
When introducing evidence in criminal and civil proceedings, examiners holding valid Cellebrite certifications are preferred over those who cannot prove their competency. Some jurisdictions require those who will be introducing evidence in legal proceedings to possess appropriate certifications.
If you have any questions about the certification process and our classes, your local Training Specialist will be happy to assist you. TS_Support@cellebrite.com or 1-800-942-3415, Option #3.
About Our New Cellebrite Certified Recovery Specialist (CCRS) Certification
The Cellebrite Certified Recovery Specialist (CCRS) track is a hardware-based track designed to prepare practitioners with the knowledge, skills, and abilities to identify potential electronic evidence, properly collect data, and extract data on multiple digital devices – including smart devices, vehicle GPS, drones, IoT devices, and many others. These course tracks also prepare you to recover destroyed or encrypted evidence using destructive and non-destructive methods.
To qualify for the CCRS Exam, all practical parts must have been completed independently during the course. Students are expected to declare at each training event their intention to pursue the certification.
The CCRS Certification is valid for three (3) years. Recertification is required every 3 years to maintain an active CCRS status.
If you have completed one or more of the required courses for this certification, you can elect to complete the remaining courses and attempt the certification.
The CCRS Certification track is made up of:
Cellebrite Mobile Forensics Fundamentals (CMFF)
Optional, but highly recommended; you may take the “CMFF Test Out Exam” if you wish to test out of this course. In-person, live online and web-based training are available.
CMFF is a two (2) day entry-level course designed to provide students with compulsory digital forensics fundamental knowledge including mobile device communication networks, explorations of Android and iOS file systems, extraction methodologies, memory (NAND) functions, and the proper handling of digital evidence for use in administrative, civil, or criminal actions. Students will learn the reasoning and strategies used by creditable practitioners to form digital forensic best practices.
Cellebrite Certified Operator (CCO)
Cellebrite Certified Operator (CCO) is a two (2) day intermediate level certification designed to further develop and practice fundamentals. The CCO course is designed to provide students with an opportunity to learn basic and intermediate data extraction techniques to achieve Logical, File System, and Physical extractions in a forensically sound manner. *CCO certification must be in active status.
Cellebrite In-System Programming (CISP)
Cellebrite’s In-System Programming (CISP) training is a five (5) day advanced-level course designed to develop students’ knowledge of the In-System Programming (ISP) process using precision soldering techniques, eMMC/ theory, methodologies, and purpose, as well as understanding the equipment and accessories necessary for performing direct eMMC/MMC/eMCP (ISP) extractions without the need for chip-off and destroying the mobile device.
Instructors will help students to develop and learn fundamental soldering skills, gain practical knowledge with hands-on practice, and share best practices and legal considerations for processing ISP extractions. Additionally, participants will learn how to fully leverage the Physical Analyzer to properly decode the extractions. Students will become familiar with conducting eMMC extractions directly from a damaged board using the RIFF box and the Z3X Pro box.
Cellebrite Chip Off Forensics (CCOF)
Cellebrite’s Advanced Smartphone Extraction (CASE) training is a five (5) day advanced-level course designed to instruct students about the chip-off process using a milling process, IR Heat and polishing through the board, flash memory in mobile devices (NAND/NOR, eMMC/eMCP, UFS), methodologies, and purpose, as well as understanding the equipment and accessories necessary for performing successful chip-off extractions.
Instructors will help students not only develop, but also to hone fundamental soldering skills and various methods to clean and “reball” a chip and gain practical knowledge with hands-on practice as well as sharing best practices and legal considerations for processing chip-off extractions. Students hone their skills with a minimum of five chip-offs, using the techniques learned, including UFS-style chips.
Additionally, participants will learn how to fully leverage the Physical Analyzer to properly decode the extractions. Students will become familiar with conducting eMMC/ eMCP extractions directly from a damaged memory chip using the Z3X Pro box, should it be necessary.
Cellebrite Evidence Recovery Technician – Forensics (CERT-F)
Certified Evidence Repair Technician – Forensic (CERT-F) is a five (5) day expert-level course designed to teach investigators who encounter damaged mobile devices which require repair before facilitating the extraction of data in a forensically sound manner. In this highly interactive course, students will learn best practices and how to replace key components on mobile devices and USB flash drives using proper disassembly and reassembly techniques.
Students will learn how to use proper heat and basic soldering techniques to repair or replace components that include but are not limited to inoperative data and charging ports, broken LCD screens, power buttons, “home” buttons, and other parts. Upon successful completion of this course, students may earn their CERT-F certification by completing a practical competency examination.
The exam requires students to successfully diagnose and repair a provided handset and achieve a successful extraction using UFED technology. Attendees will receive a toolkit, as well as a solder practice board.