Call : (+91) 968636 4243
Mail : info@EncartaLabs.com
EncartaLabs

In-System Programming (ISP) for Mobile Device Forensics

( Duration: 5 Days )

ISP “In-System Programming” applied to forensics, is the practice of connecting to an eMMC or eMCP flash memory chip for the purpose of downloading a device’s complete memory contents. eMMC and eMCP memory are the standard in today’s smartphones, and the ISP practice enables examiners to directly recover the complete data without removing the chip and destroying the device

This In-System Programming (ISP) for Mobile Device Forensics training course will provide skills on In-System Programming (ISP) processes and techniques using the precision soldering, eMMC/eMCP theory, and methodologies. You will become familiar with the equipment and accessories necessary to perform direct eMMC/eMCP (ISP) extractions, without the need for chip-off and the destruction of the mobile device

  • Basic soldering skills and be comfortable working at the PCB level

The In-System Programming (ISP) for Mobile Device Forensics workshop is ideal for:

  • Forensics Personnel

COURSE AGENDA

1

Mobile Device Technology Overview

  • Proper Identification of Mobile Devices
  • Overview of How Mobile Devices Communicate
  • Artifacts of Interest
  • Information Potentially Available from Providers
2

Flash Memory

  • Practical implications of ISP a mobile device
  • Method
  • JTAG vs. ISP
  • Safety Concerns
  • Encryption
3

Electrical Theory and Power

  • Mobile Device Power
  • Basic Elecronics
  • Powering eMMC/eMCP chip for ISP
  • Using DC Power Supply
4

Soldering Technique

  • Solder the enamed wire onto the circut board
  • Purpose
  • Safety
  • Techniques
5

Reference and Research

  • How to determine if ISP process is the best option
  • ISP pinouts
  • Support or unsupport ISP process
6

Tools and Equipment

  • Equipment needed to safely prepare a mobile device for ISP
  • Equipment needed to safely remove the chip
  • Items needed for post processing
  • Basic soldering/cleaning
  • Preparing the board for soldering
  • Testing Connectivity
7

Forensic Process

  • Best practice for ISP process
  • Hashing
  • Validation
8

Cell Phone Disassembly

  • Sealed devices
  • Battery precautions
  • Parts
  • Removing the motherboard
9

eMMC/eMCP Chip Removal

  • Heat Gun Methods
  • Chip Removal
  • Cleaning
  • Locate the ISP Pinout using multimeter
  • Preparing to read
10

RIFF Box and Z3X Box Software

  • Install RIFF Box and Z3X Box software
  • Discuss various options within the software
  • Add on accessories
11

Z3X Pro Imaging

  • Using the MOORC kit
  • Z3X Pro Software
  • Direct-Solder onto a eMMC/eMCP chip
12

Introduction to Physical Analyzer

  • PA Advanced Open
  • PA Chaining for flash memory
  • Preparing a report of results
  • Practicalstart with a device which must have the chip removed to process the data

Encarta Labs Advantage

  • One Stop Corporate Training Solution Providers for over 6,000 various courses on a variety of subjects
  • All courses are delivered by Industry Veterans
  • Get jumpstarted from newbie to production ready in a matter of few days
  • Trained more than 50,000 Corporate executives across the Globe
  • All our trainings are conducted in workshop mode with more focus on hands-on sessions

View our other course offerings by visiting https://www.encartalabs.com/course-catalogue-all.php

Contact us for delivering this course as a public/open-house workshop/online training for a group of 10+ candidates.

Top
Notice
X