Training

Bringing quality, cost-effective and platform-neutral education to the community, Teel Technologies’ courses cover both advanced forensics, as well as tool-specific training per customer requirements. Our current course offerings provide practitioners with the skills that go beyond the standard logical acquisition and analysis efforts. Our tool-specific classes are custom-configurable for each client, based upon their specific requirements or tool deployments. And we have a complete mobile classroom that enables us to bring the classroom to the students, and set-up where needed.

Upcoming classes are listed below, and feel free to contact us with any questions or specific requests.

Our trainings


Embedded Hardware Acquisition & Analysis Training

Access digital data at the physical level from sources that include IOT devices, smart tvs, vehicle systems, skimmers/shimmers and drones.

Learn More

Board Level Repair for the Digital Forensic Examiner

Students attending this training will be able to diagnose inoperable devices and repair devices at the board level to obtain data extractions.

Learn More


Windows 10 Advanced Forensics

This course will teach how to analyze artifacts left behind through system and user interaction with the host system. Students will explore how applications function and store data in the file system and within SQL databases.

Learn More

Drone Forensic Analysis

This course will introduce you to the world of UAV’s and instruct you how to fly a drone followed by best practices in conducting forensically sound extractions and analysis of UAS data.

Learn More


Elcomsoft Password Recovery & Data Decryption

In this 3-day Password Recovery and Data Decryption for Mobile Forensics Course, students will develop an in-depth knowledge of password protection and data encryption techniques used in mobile forensics.

Learn More

Advanced Flasher Box Bootloader Training

Class participants will gain an in-depth understanding of today’s most useful and effective flasher boxes and bootloader utilities to unlock and acquire mobile device memory.

Learn More


Essential Smart Phone Forensics

Students will learn some simple repair techniques and utilize open-source tools to extract data from smartphones via hands-on exercises.

Learn More

Combined ISP/Chip-off 2.0 Forensics

Students will learn to perform memory acquisitions using ISP (In-System Programming) and Advanced BGA Chip-off techniques.

Learn More


ISP (In-System Programming) Training

ISP allows examiners to connect to an eMMC or EMCP flash memory chip (standard in today’s smartphones) for the purpose of downloading a device’s complete memory contents. Examiners can directly recover the complete data without removing the chip and destroying the device.

Learn More

Chip-off 2.0 Forensics with Certification

Teel Tech Chip-Off 2.0 provides students with a comprehensive education in performing forensics on memory chips used in today’s mobile devices and other media.

Learn More


Combined JTAG/Chip-Off Training

Students will learn to perform memory acquisitions using the JTAG and Advanced BGA Chip-off techniques.

Learn More

SQLite Forensics Training

Both Android OS and Apple iOS store their data using SQLite. Mobile forensic analysts can easily leverage this commonality to perform low-level analysis and recovery on a majority of phones.

Learn More


Oxygen Forensic Bootcamp

Geared toward students that have a working familiarity with mobile device acquisition and extraction, this course focuses on the analytic analysis and reporting capabilities of the Oxygen Forensic® Detective powered by JetEngine.

Learn More

PC-3000 HDD Data Recovery Expert Training

Students attending this training will receive in-depth education involving HDD Data Recovery using PC-3000 Express and UDMA.

Learn More


PC-3000 Flash/SDD/Monolith Data Recovery Expert Training

Digital forensics experts and data recovery professionals who take this course will be able to restore damaged NAND-based drives, including monolith devices (MicroSD; xD; SD, UFD, MS in monolith package).

Learn More

FAQs

JTAG
Chip-off
ISP
Joint Test Action Group (JTAG) is an industry standard devised for testing printed circuit boards (PCBs) using boundary scan and was designed to quickly and easily test PCBs coming off a manufacturing assembly line. JTAG Forensics is a process that uses that same process and involves connecting the the Test Access Ports (TAPs) on a PCB via solder, molex or jig and then uses a supported JTAG Box (Riff, Z3X, ATF, etc.) to instruct the processor to acquire the raw data stored on the connected memory chip to get a full physical image from the device. This process is non-destructive to the phone. Chip-off Forensics is the process in which a BGA memory chip is removed from a device and prepared so that a chip reader can acquire the raw data to obtain a physical data dump. A chip reader, like the UP 828P Programmer or a SIREDA test socket, is required to perform the read and in the case of the UP 828P, a specific adapter will be required depending on the specific chip. Unlike JTAG, chip-off is a destructive process, and the device will no longer function. Many examiners start with a non-destructive technique like JTAG or ISP before submitting to a Chip-off. In-System Programming (ISP) applied to forensics, is the practice of connecting to an eMMC or eMCP flash memory chip for the purpose of downloading a device’s complete memory contents. eMMC and eMCP memory are the standard in today’s smartphones, and the ISP practice enables examiners to directly recover a complete data dump without removing the chip or destroying the device. Identifying the taps that connect to the memory chip using a multimeter is required in ISP technique. Thus, for each evidence phone, a second identical phone that can be destroyed will be needed.

JTAG
Chip-off
ISP
Students learn how to make a JTAG connection to a locked device by primarily soldering to the TAPs (Test Action Points) in order to access the physical memory on the device. Connecting via a Molex Connection or using a custom JIG is also taught. Some newer phones may not be JTAGable. Students learn how to remove the chip from board using various techniques and prepare the board to do a read. Students also learn the fundamentals of the various memory structures found on devices ranging from smartphones, tables and SSD drives. ISP is a good choice for labs seeing newer phones unsupported by JTAG that contain an eMMC or eMCP chip. It is a non-destructive process like JTAG, but it requires very fine precision soldering and either excellent vision or proper magnification.
Learn More about
Teel Tech JTAG Forensics Training
Learn More about
Teel Tech Chip-off Forensics Training
Learn More about
Teel Tech ISP Forensics Training

JTAG
Chip-off
ISP
Most students start off taking JTAG first. It’s easy to learn, relatively low cost for the equipment needed and it is non-destructive to the device. Chip-off equipment is considerably more expensive than JTAG and that alone can be a barrier to entry for many examiners with tight budgets. However, it is much more reliable. Teel Tech recommends the you take JTAG before taking ISP. Because ISP requires very fine precision soldering, it is recommended that you have adequate soldering experience.

JTAG
Chip-off
ISP
Many manufacturer and model of phones are supported. Support varies from device to device. Most, but not all, devices New phones with eMMC & eMCP memory

JTAG, Chip-off & ISP
ISP
Teel Tech JTAG, Chip-off and ISP students get access to the Physical and RAW Mobile Forensic Google Group, with a focus on Mobile Phone Forensics – Forensics Tools; Flasher Box; Bootloader; JTAG; ISP; and Chip-off are some of the topics of discussion. Moderated by Bob Elder, Director of Training and the head of Teel Tech Canada, the group is now over 1000 people, all LE, a policy strictly maintained. Below is a real example of a daily topic summary. In addition to the Physical and RAW group, ISP students are also invited to an ISP discussion only google group where they can share pin outs and experiences with one another.
PRAW-google-group 

Teel Technologies was the first to introduce JTAG, Chip-off and ISP to the mobile forensic community. We constantly receive feedback that our classes are the best. And our classes are taught by seasoned mobile forensic examiners who are either active or retired law enforcement who practice these techniques day in and day out.

Load More

What our customers have to say

Our trainings