
Upcoming Classes
Certification Overview
The Cellebrite Certified Mobile Examiner track is designed to prepare practitioners with the knowledge and skills to perform forensically sound mobile investigations. These course tracks also prepare the candidate to utilize Cellebrite’s Inseyets UFED technology and Inseyets Physical Analyzer to conduct extractions, analyze findings, and prepare reports for legal proceedings.
The CCME track is made up of:
- Cellebrite Certified Operator (CCO) for Inseyets
- Cellebrite Certified Physical Analyst (CCPA) for Inseyets
- Cellebrite Advanced Smartphone Analysis (CASA) with Inseyets
Our legacy CCO, CCPA, and CASA courses are accepted as prerequisites for the CCME Certification, provided they are in good certification standing.
To qualify for the CCME Practical Exam and Certification, candidates must have active core certifications (CCO & CCPA) and must have completed the CASA advanced course. The CCME Certification is valid for two years. Recertification is required every two years to maintain active CCME status.
Why was CASA added to the CCME requirements?
How To Renew?
To renew your CCME certification, you must complete 21 additional hours of continuing education (CE) credits and hold current CCO and CCPA certifications. If you have not yet completed the CASA course, you will need to do so before the renewal deadline to maintain your CCME certification.
Certification Workshop
The CCME Preparation Workshop is designed for students who have completed the necessary prerequisites and are ready to begin the capstone certification process for Cellebrite’s core mobile forensics track. During the workshop, candidates will gain a detailed understanding of the CCME process and learn what is required to successfully complete the practical skills assessment and certification exam.
The workshop includes a 4-hour preparation course, consisting of 12 instructional videos that cover essential material from CMFF, CCO, CCPA, and CASA—all of which are necessary for the CCME exam. The final section of the course provides an overview of what students can expect during the CCME practical and exam.
The CCME Workshop is included in the CCME Exam purchase.
Certification Policies
Cellebrite Certification Policy
Cellebrite Training Code of Ethics and Professional Standards
Course FAQ's
What is the CCME Certification Process?
Is there a class associated with the CCME?
How much does the CCME cost?
1. Download material associated with the practical skills assessment; and,
2. Attempt to pass the time-limited practical skills assessment to qualify for the CCME Certification Examination.
If the practical skills assessment is passed, candidates qualify to take the time limited and proctored CCME Certification Examination. CCME candidates are allowed a total of two attempts at the CCME Certification Examination.
What are the prerequisites?
1. Cellebrite Certified Operator (CCO) – Current, non-expired certification
2. Cellebrite Certified Physical Analyst (CCPA) – Current, non-expired certification
3. Cellebrite Advanced Smartphone Analysis - Certificate of Completion
Cellebrite Mobile Forensic Fundamentals (CMFF) – is optional, but highly recommended. You may take the “CMFF Test Out Exam” if you wish to test out of this course.
Once I am eligible and enroll, how long do I have to complete the CCME?
Are there certain technical requirements for the proctored examination?
Can I ask for help from Cellebrite to complete the CCME?
What software, hardware, and resources will I need to complete the CCME process?
• A computer capable of running UFED Physical Analyzer software.
• A dongle or software license to use UFED Physical Analyzer software.
• An internet connection to complete the practical skills assessment online.
A candidate’s failure to have licensed software and/or decode the extractions provided is not an acceptable excuse for a failed attempt.
How should I prepare for the CCME?
• When to and how to use the Open Advanced dialogue.
• Database analysis techniques (SQLite, etc.). -How to analyze unsupported (not decoded) iOS and Android applications and related data artifacts.
• How to analyze data artifacts associated with uninstalled applications.
• How to view and decode hexadecimal values. -How to analyze plist files.
• How to identify exact hexadecimal and decimal offsets for specific data.
• How to identify user account IDs associated with social media accounts.
The CCME Certification Examination consists of 75 knowledge questions that are randomly selected from a bank of questions based on prerequisite course content (CCO, CCPA and CASA). There may also be questions related to database analysis. Candidates may use their notes and course material during the CCME Certification Examination.
What happens if I do not pass the CCME?
If a candidate does not pass their first attempt at the CCME Certification Examination, they may opt to take a second (and final) attempt by following the policies and timelines listed below. A candidate’s work or personal schedule is not an acceptable excuse for missing the stated time limits. The second (and final) attempt shall take place only after a 30-day waiting period after the initial CCME Certification Examination failure. There is no waiver available for this waiting period. If a candidate does not pass their second (and final) attempt at the CCME Certification Examination, the attempt at achieving CCME certification terminates. To attempt the CCME again, the candidate must meet all qualifications prior to reapplying and repeating the entire CCME Process. Reapplication includes an additional payment of the CCME process fee.
What is the passing score?
Can I challenge questions or results?
What happens when I pass the CCME?
How do I renew the CCME?
Continuing Professional Development: Cellebrite requires documentation verifying attendance at a minimum of 21 hours of continuing professional development related to mobile device or digital forensics from industry recognized organizations. Acceptable training hours include those offered by IACIS, US Secret Service NCFI, other industry-leading digital forensic training vendors or an accredited college providing an official curriculum of training in digital forensics. Full details on acceptable continuing professional development hours are available in the Cellebrite Certification Policy.
Work Experience: At the time of recertification application submission, certificants must have examined or supervised the examination of a minimum of three (3) mobile devices during the previous certification period. Full details on acceptable work experience hours are available in the Cellebrite Certification Policy.
• Recertification options are available in the system during the 12 months preceding your expiration date.
• Renewal of certifications which become expired may only be renewed for 12 months after expiration.
• CCME certificates not renewed within 12 months of expiration, will become invalid and the entire process must be started again if a candidate wishes to earn it again.
To learn more about recertification, please refer to the below knowledge article on the Cellebrite Community.