Cellebrite Mobile Forensics Fundamentals (CMFF) is an entry‑level, foundational course designed to introduce investigators and analysts to the core principles of mobile device forensics.

The course provides a practical understanding of how mobile devices store data, how digital evidence is acquired, and how extracted data is explored and handled in investigative contexts. Students are introduced to mobile operating systems, file systems, extraction methodologies, and evidence handling considerations to support administrative, civil, and criminal investigations.

Course Learning Objectives

Upon completion of this course, students will be able to:

• Describe different types of mobile devices and mobile operating systems
• Explain foundational digital forensic principles and processes
• Recognize how mobile data is stored and structured on devices
• Describe common mobile data acquisition methods
• Explore extracted mobile device data in a forensic context
• Apply best practices for handling mobile digital evidence

Cellebrite Mobile Forensics Fundamentals includes:

• Overview of mobile forensic concepts and terminology
• Introduction to mobile device hardware, operating systems, and file systems
• Understanding mobile data storage, memory (NAND), and device communication basics
• Overview of mobile extraction methodologies and forensic workflows
• Exploring extracted data to identify relevant evidence
• Evidence handling principles and forensic best practices

When This Course Matters: When agencies or organizations need a foundational understanding of mobile device forensics, evidence handling, and investigative workflows before moving into advanced tools, techniques, or certification tracks. This course is ideal for building baseline competency and shared understanding across teams new to mobile forensics.

Recommended Experience: No prior mobile forensics experience is required. Familiarity with digital investigations or evidence handling concepts is helpful but not required.