Since their initial introduction in 2007, Smartphones have come to dominate the cellular phone marketplace quickly making feature phones nearly obsolete. This domination is split fairly evenly between two major companies: Google with their Android OS and Apple touting their own iOS. Even though both of these companies are business rivals and their file systems are significantly different, both share a commonality in that they both store a majority of their user data within a data storage container type called SQLite. “SQLite is an in-process library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine.” Mobile Forensic Analysts can easily leverage this commonality, by learning the skills required to perform low-level analysis and recovery on SQLite databases. Once learned and mastered, examiners can then support nearly 99% of the device data they will come across in the majority of their mobile device examinations.
To illustrate the vast amount of work to be done, as of January 2015, the Google Play Store reported 1.43 Million Applications being available in their Google Play Store. At the same time, Apple’s iTunes Store reported over 1.4 Million apps currently being available for download. That’s a total of over 2.8 MILLION apps. Even the most popular mobile forensic tool only supports parsing of 200 different applications. This support accounts for a miniscule %001 of the total apps and leaves a 99.999% gap!
This class will help examiners close that gap by teaching the students:
We encourage students to bring their own laptops whenever possible. If this is not possible, please contact us in order to find a solution. If you do plan on bringing your own laptop, please ensure the meet the following requirements.
|Description||TeelTech SQLite Forensics|
|Date||25.02.2019 – 27.02.2019
08.07.2019 – 10.07.2019
|Price||CHF 2995.00 excl. VAT|
Important Information! Classes are not confirmed until 30 days prior to course start. Please do not consider an acknowledgement letter or invoice as confirmation that a class will definitely run. Please feel free to contact us to before making travel arrangements, to confirm the class is going forward. A confirmation notice will be issued when a class is confirmed, or a cancellation notice if it will not be held.
|TeelTech In-System Programming (ISP)||17.06.2019 – 21.06.2019||Zürich, Switzerland||Closed|
|TeelTech CHIP-OFF 2.0 Forensics||24.06.2019 – 28.06.2019||Zürich, Switzerland||Closed|
|TeelTech SQLite Forensics||08.07.2019 – 10.07.2019||Zürich, Switzerland||Closed|
|TeelTech Advanced BootLoader/Flasherbox||01.07.2019 – 05.07.2019||Zürich, Switzerland||Closed|
|TeelTech JTAG 2.0 Forensics||10.06.2019 – 14.06.2019||Zürich, Switzerland||Closed|