Certifications - CCME inseyets_4x

Cellebrite Certified Mobile Examiner (CCME) for Inseyets

Upcoming Classes

FILTER BY:
No results found. Please try again later

Certification Overview

The Cellebrite Certified Mobile Examiner track is designed to prepare practitioners with the knowledge and skills to perform forensically sound mobile investigations. These course tracks also prepare the candidate to utilize Cellebrite’s Inseyets UFED technology and Inseyets Physical Analyzer to conduct extractions, analyze findings, and prepare reports for legal proceedings.

The CCME track is made up of:

  • Cellebrite Certified Operator (CCO) for Inseyets
  • Cellebrite Certified Physical Analyst (CCPA) for Inseyets
  • Cellebrite Advanced Smartphone Analysis (CASA) with Inseyets

Register Now

Our legacy CCO, CCPA, and CASA courses are accepted as prerequisites for the CCME Certification, provided they are in good certification standing.

To qualify for the CCME Practical Exam and Certification, candidates must have active core certifications (CCO & CCPA) and must have completed the CASA advanced course. The CCME Certification is valid for two years. Recertification is required every two years to maintain active CCME status.

Why was CASA added to the CCME requirements?

How To Renew?

To renew your CCME certification, you must complete 21 additional hours of continuing education (CE) credits and hold current CCO and CCPA certifications. If you have not yet completed the CASA course, you will need to do so before the renewal deadline to maintain your CCME certification.

Certification Workshop

The CCME Preparation Workshop is designed for students who have completed the necessary prerequisites and are ready to begin the capstone certification process for Cellebrite’s core mobile forensics track. During the workshop, candidates will gain a detailed understanding of the CCME process and learn what is required to successfully complete the practical skills assessment and certification exam.

The workshop includes a 4-hour preparation course, consisting of 12 instructional videos that cover essential material from CMFF, CCO, CCPA, and CASA—all of which are necessary for the CCME exam. The final section of the course provides an overview of what students can expect during the CCME practical and exam.

The CCME Workshop is included in the CCME Exam purchase.

Course FAQ's

What is the CCME Certification Process?

The CCME certification program is a capstone certification program for Cellebrite’s core mobile forensic track. This certification program is designed to measure the knowledge, skills, and abilities of certification candidates based on the completion of time-limited practical exercises and a proctored knowledge-based examination. Earning the CCME certifies that mobile device examiners have attained a level of mastery in the discipline of mobile device forensic investigation methodology as well as a high degree of proficiency with Cellebrite’s Physical Analyzer software. Earning the CCME requires a high level of working and practical knowledge regarding Cellebrite’s UFED technology. The certification program tests basic knowledge, tool knowledge, and practical experience using two popular mobile device operating systems including Android and iOS.

Is there a class associated with the CCME?

There are prerequisites for the CCME described on this page as well as a description of how to prepare for the CCME. In addition, there is an on-demand 3-hour preparation workshop included in the CCME process.

How much does the CCME cost?

Log in to your MyCellebrite account for all costs. This fee allows qualified candidates to enter the CCME process and have the ability to complete the following:

1. Download material associated with the practical skills assessment; and,
2. Attempt to pass the time-limited practical skills assessment to qualify for the CCME Certification Examination.

If the practical skills assessment is passed, candidates qualify to take the time limited and proctored CCME Certification Examination. CCME candidates are allowed a total of two attempts at the CCME Certification Examination.

What are the prerequisites?

At the time of initial application, the applicant must possess the following valid certificates:

1. Cellebrite Certified Operator (CCO) – Current, non-expired certification
2. Cellebrite Certified Physical Analyst (CCPA) – Current, non-expired certification
3. Cellebrite Advanced Smartphone Analysis - Certificate of Completion

Cellebrite Mobile Forensic Fundamentals (CMFF) – is optional, but highly recommended. You may take the “CMFF Test Out Exam” if you wish to test out of this course.

Once I am eligible and enroll, how long do I have to complete the CCME?

The CCME process must be completed within 45 days of the candidate’s enrollment date. Failed attempts will require the applicant to restart the certification process again by paying all applicable fees and reapplying. A candidate’s work or personal schedule is not an acceptable excuse for missing this deadline, therefore there is no waiver available for this time limit. Failure to complete the CCME within the 45-day period shall be considered a failed attempt.

Are there certain technical requirements for the proctored examination?

Cellebrite now uses an online proctoring service called ProctorFree. Students must be able to utilize the Proctor Free application, which is downloaded and executed via the browser. We have established the Proctored Exam Preparation Guide page to aid student with preparing for this process. All students should visit this page prior to attempting the final exam.

Can I ask for help from Cellebrite to complete the CCME?

The CCME is for experienced examiners who must complete tasks and answer questions which will challenge their knowledge, skills, and abilities. Unfortunately, Cellebrite does not answer questions related to the CCME standalone certification tasks. This does not preclude a candidate to challenge questions on the examination.

What software, hardware, and resources will I need to complete the CCME process?

CCME candidates must have: -Access to licensed either a UFED Touch/Touch2 or UFED4PC.

• A computer capable of running UFED Physical Analyzer software.
• A dongle or software license to use UFED Physical Analyzer software.
• An internet connection to complete the practical skills assessment online.

A candidate’s failure to have licensed software and/or decode the extractions provided is not an acceptable excuse for a failed attempt.

How should I prepare for the CCME?

The practical skills assessment is designed to allow the candidate to demonstrate their ability to analyze a known data set through the application of best forensic practices, forensic concepts, and methodologies in the analysis of the data. Candidates who have attended advanced smartphone analysis courses, along with investigative experience, should have sufficient skills to pass the practical skills assessment. The two practical skills assessments will require examiners to know:

• When to and how to use the Open Advanced dialogue.
• Database analysis techniques (SQLite, etc.). -How to analyze unsupported (not decoded) iOS and Android applications and related data artifacts.
• How to analyze data artifacts associated with uninstalled applications.
• How to view and decode hexadecimal values. -How to analyze plist files.
• How to identify exact hexadecimal and decimal offsets for specific data.
• How to identify user account IDs associated with social media accounts.

The CCME Certification Examination consists of 75 knowledge questions that are randomly selected from a bank of questions based on prerequisite course content (CCO, CCPA and CASA). There may also be questions related to database analysis. Candidates may use their notes and course material during the CCME Certification Examination.

What happens if I do not pass the CCME?

Candidates receive an attempt at the practical skills assessment. If a candidate does not pass the practical skills assessment, they may not proceed to the proctored CCME Certification Examination and must meet all qualifications prior to reapplying for the CCME Process. Reapplication includes an additional full payment of the CCME process fee. Log in to your MyCellebrite account for all costs.

If a candidate does not pass their first attempt at the CCME Certification Examination, they may opt to take a second (and final) attempt by following the policies and timelines listed below. A candidate’s work or personal schedule is not an acceptable excuse for missing the stated time limits. The second (and final) attempt shall take place only after a 30-day waiting period after the initial CCME Certification Examination failure. There is no waiver available for this waiting period. If a candidate does not pass their second (and final) attempt at the CCME Certification Examination, the attempt at achieving CCME certification terminates. To attempt the CCME again, the candidate must meet all qualifications prior to reapplying and repeating the entire CCME Process. Reapplication includes an additional payment of the CCME process fee.

What is the passing score?

A passing score of 80% or above must be achieved on both the Practical Skills Assessment and CCME Certification Examination to obtain the CCME certification. Grading for the Practical Skills Assessment: Each of the device examinations shall be graded separately and averaged during the practical skills assessment. Candidates must achieve an average of 80% or higher between both practical skills assessment to advance to the knowledge examination. Grading for the CCME Certification Examination: Candidates must achieve a score of 80% or higher to pass the CCME Certification Examination.

Can I challenge questions or results?

To challenge any question(s), you must dispute the published correct answer(s) by providing a descriptive and persuasive reason for an alternate correct answer(s), using a justification and supporting information. Challenge questions will be reviewed by the Certification Body for final disposition. Submission of a challenge does not disqualify you from your final attempt.

What happens when I pass the CCME?

When a candidate passes the practical skills assessment, they have qualified to take the proctored CCME Certification Examination. Upon passing the CCME Certification Examination, the candidate earns the CCME certification credential and may download it from MyCellebrite: Training ->My Learning -> Certifications.

How do I renew the CCME?

The CCME certification or recertification must be renewed by its expiration date to remain valid. It is the CCME Certificant’s responsibility to complete recertification requirements as instructed on the learning management system. There is no recertification examination or course available for the CCME recertification. To successfully renew the CCME Certification, each certificant must pay a nominal recertification fee, reaffirm their intention to uphold the Cellebrite Training Code of Ethics and Professional Conduct, and submit proof of continuing professional development and work experience as follows:

Continuing Professional Development: Cellebrite requires documentation verifying attendance at a minimum of 21 hours of continuing professional development related to mobile device or digital forensics from industry recognized organizations. Acceptable training hours include those offered by IACIS, US Secret Service NCFI, other industry-leading digital forensic training vendors or an accredited college providing an official curriculum of training in digital forensics. Full details on acceptable continuing professional development hours are available in the Cellebrite Certification Policy.

Work Experience: At the time of recertification application submission, certificants must have examined or supervised the examination of a minimum of three (3) mobile devices during the previous certification period. Full details on acceptable work experience hours are available in the Cellebrite Certification Policy.

• Recertification options are available in the system during the 12 months preceding your expiration date.
• Renewal of certifications which become expired may only be renewed for 12 months after expiration.
• CCME certificates not renewed within 12 months of expiration, will become invalid and the entire process must be started again if a candidate wishes to earn it again.

To learn more about recertification, please refer to the below knowledge article on the Cellebrite Community.

How much is the CCME recertification fee?

Log in to your MyCellebrite account for all costs. This fee allows qualified candidates to recertify their CCME.

What happens if I fail to renew my CCME?

Certificants failing to recertify by their expiration date will be classified as expired. To renew an expired certification, the holder of that certification must apply for and successfully complete the CCME recertification process within twelve (12) months of the certification expiration. Certificants will be responsible to pay any applicable administrative fees. Certificants who fail to renew expired certifications within the 12-month grace period must qualify for, apply for and complete the CCME program in its entirety.