Mobile forensics fundamentals and best practices (Third party module)

FORMOBILE is an EU project aiming to create an end-to-end mobile forensic investigation chain, striving to improve digital safety, and security in the EU.

The Mobile Forensics Fundamentals and Best Practices (M1FBP) online module, developed by FORMOBILE, focuses on the basics of mobile forensics e.g., acquisition, extraction and analysis. In addition, this course includes procedures, principles, guidelines, best practices within the field based on the works conducted in WP3, namely the CEN workshop agreement (CWA).

After completion of this online module, candidates will have the following knowledge, skills and competence:

Knowledge & understanding:       

• Basic fundamentals of computer science technologies and techniques. 
• The fundamental concepts of mobile forensics and the techniques used within the field in an investigative perspective.
• Key standards in the field of mobile forensics and good practice guidelines. For example: ACPO, ENFSI, ISO, SWGDE, Daubert, Frye.
• Current best practices: Chain of custody; Order of Volatility; Order of Importance; and Locard Principle.
• The difference between validation and verification.
• The difference and/or application of acceptability and admissibility of digital evidence in the court.
• The importance of cooperation and collaboration within law enforcement.

Skills:

• Interpret standards in mobile forensics and their relevance to investigative techniques, processes and procedures.
• Protect a mobile device from unwanted alteration from network sources or personnel mishandling.
• Apply common audit, documentation and reporting requirements across the entire investigation chain.
• Apply structured and systematic working methodologies.

Competences:

• Apply basic fundamental knowledge of mobile forensic investigations and assess standards, procedures and best practices.
• Handle the crime scene based on the
  context and utilise the appropriate best practices.
• Design an organisation policy based on standard, procedures and best practices.
• Use the most appropriate procedure for preserving the integrity of a mobile device.      
• Justify any deviations from standards, procedures or best practices.