Cellebrite Advanced Smartphone Analysis with Inseyets (CASA)
Course Level: Advanced
Duration: Five-day course with 35 total instructional hours
Available Languages: English, Spanish (Spain), French, German, Japanese, and Hebrew
Delivery Options: In-Person, Virtual, and Self-Paced formats (in-person and virtual options include required self-paced pre-work)
Course Overview
This advanced five-day program focuses on sophisticated forensic recovery and analysis of mobile application data using the Inseyets platform. Participants engage in deep examination of Android and iOS extractions through Inseyets Physical Analyzer, including SQLite database exploration, advanced search methodologies, and decoding of unsupported or partially decoded application information. The course emphasizes pattern-of-life analysis across mobile artifacts, validation of findings using established forensic best practices, and application of third-party, open-source tools and Python scripting to enhance analytical capabilities.
What You'll Learn
- Advanced forensic recovery and analysis of mobile application data
- Deep analysis of Android and iOS extractions using Inseyets Physical Analyzer
- SQLite database exploration and advanced search techniques
- Decoding of unsupported and partially decoded application data
- Pattern-of-life analysis across mobile artifacts
- Validation of findings using forensic best practices
- Application of third-party, open-source tools and Python scripting to extend analysis
Who This Course Is For
This program is designed for advanced mobile forensic practitioners who focus on deep data analysis, examiners responsible for analyzing complex mobile application data, and teams preparing for the CCME Inseyets capstone pathway.
Course Competencies
Upon successful completion, participants will be able to analyze mobile extractions using Inseyets Physical Analyzer, interpret Android and iOS file system structures and data artifacts, inspect SQLite databases and use SQL to filter and sort data, identify and interpret unsupported or partially decoded data, decode unsupported applications using SQL Builder techniques, apply Python fundamentals to assist with data interpretation, perform pattern-of-life analysis to support investigative findings, and validate analysis results while supporting defensible forensic conclusions.
Course Purpose and Pathway
CASA Inseyets is not a standalone certification but rather the final required course in the Cellebrite Certified Mobile Examiner (CCME) Inseyets pathway. The complete CCME pathway requirements include Cellebrite Certified Operator for Inseyets (CCO), Cellebrite Certified Physical Analyst for Inseyets (CCPA), and Cellebrite Advanced Smartphone Analysis with Inseyets (CASA).
Prerequisites and Preparation
While no formal prerequisites are required, completion of the Cellebrite Certified Physical Analyst (CCPA) course is recommended, and strong familiarity with Inseyets Physical Analyzer is highly recommended. Assigned pre-work modules must be completed before the start of class and are included in the final examination.
Primary Tools and Resources
Participants will work with Inseyets Physical Analyzer for advanced forensic analysis and validation, utilize SQLite database views for deep database inspection and recovery, and employ advanced search and examination tools within the platform. The course emphasizes hands-on training in smartphone application analysis to build expert-level skills for complex mobile forensic investigations.