24300  

Dixie State University

Computer Crime Institute

Chip Off Forensics Training

$2400 for 3 days of training

The DSU-CCI Chip Off Forensics Training gives attendees hands-on instruction in chip-off procedures and data recovery using a variety of  techniques. 

Our three day training includes the following units:

Unit 1:  Cell Phone Disassembly and Basic Cell Phone Repair

This unit gives students hands-on experience regarding various cell phone styles and how to disassemble each to safely remove the motherboard. It is recognized that the chip-off process is a final solution. Therefore we instruct students on processes that can avoid the necessity of chip-off. Basic cell phone repair covers basic cleaning techniques for water damage that can restore a phone or a data port to functionality. Again, this is a hands-on process.

Unit 2: Removing and Repairing the BGA Chip

 This unit gives students experience in disassembling the phone, using a rework station to remove the BGA chip from the PCB, cleaning and repairing the chip, placing the chip in a programmer/adapter and extracting a binary image.

Unit 3: I dentifying and Reading the Chip

This unit provides students the opportunity to identify chip models and choose the appropriate reader adapter. Students also learn to place the chip in the adapter enabling all required connections and extracting the binary image of the chip. This unit also discusses the properties of Nand flash memory, eMMC chip and Universal Flash Storage.

Unit 4: Making Sense of an Unstructured Hex Dump

In addition, this unit gives students hands on experience in manually carving binary images. While programs like Cellebrite Analyst Pro and XRY are helpful in parsing images extracted from cell phones, they currently do not support all phones. This unit instructs on the use of Scalpel and Strings, discusses the different timestamp formats utilized, the different file systems and Operating Systems used by cell phones, and discusses methods to collect and organize data into a report.

Unit 5: Making sense of a Structured Hex Dump

While it is important to be able to parse an unstructured data dump, it is just as important to be able to parse a data dump with a recognizable file system. Tools such as Xways, FTK Imager, XRY and Physical Analyzer pro will be used to identify file systems. Windows phone sms storage is addressed as well as the problems and solutions inherent with iOS devices. 

 

Register Now!