Course Summary

Computer Science 335: Mobile Forensics has been evaluated and recommended for 3 semester hours and may be transferred to over 2,000 colleges and universities. With this self-paced course, you get engaging lessons, expert instructors who make even the most challenging computer science topics simple, and an excellent resource for getting a head start on your degree.

Create an account
to start this course today

Try it risk-free for 30 days

Create an account
Try it risk-free for 30 days

13 chapters in Computer Science 335: Mobile Forensics

expand all | collapse all

Course Practice Test

Check your knowledge of this course with a 50-question practice test.

Comprehensive test covering all topics
Detailed video explanations for wrong answers

Take Practice Test

View all practice tests in this course

Week {{::cp.getGoalWeekForTopic(0, 13)}}

Ch 1. Foundations of Digital Forensics {{cp.topicAssetIdToProgress[626647].percentComplete}}% complete

	Best Score
Lesson 1 - What is Forensic Science? - Definition, History & Types	Take Quiz
		Take Quiz
Lesson 2 - What is Computer Forensics? - Definition & Examples	Take Quiz
Lesson 3 - Digital Forensics: Tools & Resources	Take Quiz
Lesson 4 - Digital Forensics Investigation Process: Overview & Steps	Take Quiz
Lesson 5 - Issues in Digital Evidence: Rules & Types	Take Quiz
Lesson 6 - Internet of Things: Definition, Components & Examples	Take Quiz
Lesson 7 - Internet Security & the Internet of Things	Take Quiz

Week {{::cp.getGoalWeekForTopic(1, 13)}}

Ch 2. Introduction to Mobile Forensics {{cp.topicAssetIdToProgress[626649].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Mobile Forensics: Definition, Uses & Principles			Take Quiz
	Lesson 2 - How Mobile & Desktop Devices Impact Forensic Investigations			Take Quiz
	Lesson 3 - Challenges in Mobile Forensics Investigations			Take Quiz
	Lesson 4 - Mobile Forensic Incidents: Process & Example			Take Quiz
	Lesson 5 - Basics of the Windows OS for Digital Forensics			Take Quiz
	Lesson 6 - What is a Mobile Operating System? - Features & Types			Take Quiz
	Lesson 7 - Mobile Ecosystem: Security Mechanisms & Risks			Take Quiz
	Lesson 8 - Common Case Data Types in Mobile Forensics Investigations			Take Quiz
	Lesson 9 - Collecting & Analyzing Evidence in Mobile Forensics			Take Quiz
	Lesson 10 - Mobile Device Forensics Tool Classification System: Definition & Levels			Take Quiz
	Lesson 11 - Data Acquisition Methods in Mobile Forensics: Physical, Logical & Manual			Take Quiz

Week {{::cp.getGoalWeekForTopic(2, 13)}}

Ch 3. Examination of iOS Devices {{cp.topicAssetIdToProgress[626669].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Mobile iOS Devices & Data: Types, Storage & Access Methods			Take Quiz
	Lesson 2 - File Systems: FAT, NTFS, and HFS+			Take Quiz
	Lesson 3 - HFS+ Filesystem: Definition, Characteristics & Internal Structure			Take Quiz
	Lesson 4 - Using External Searching & B-Trees in Memory Management			Take Quiz
	Lesson 5 - APFS Filesystem: Definition, Features & Structure			Take Quiz
	Lesson 6 - History of iOS Development: Updates & Device Compatibility			Take Quiz
	Lesson 7 - iOS Architecture Components: Layers & Components			Take Quiz
	Lesson 8 - Threads in an Operating System: Definition & Examples			Take Quiz
	Lesson 9 - iOS Security Architecture: Layers & Features			Take Quiz
	Lesson 10 - Preventing Privilege Escalation			Take Quiz
	Lesson 11 - Mobile Device Security Management: Software & Best Practices			Take Quiz

Week {{::cp.getGoalWeekForTopic(3, 13)}}

Ch 4. Acquiring Data from iOS Devices {{cp.topicAssetIdToProgress[626683].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - iOS Device Operating Modes: Types & Access Tools			Take Quiz
	Lesson 2 - Digital Data: Acquisition & Transmission			Take Quiz
	Lesson 3 - Systems Software: Utility Software, Device Drivers and Firmware			Take Quiz
	Lesson 4 - Setting Up a Mobile Forensics Environment for iOS Devices			Take Quiz
	Lesson 5 - Logical Acquisition for iOS Devices: Definition & Process			Take Quiz
	Lesson 6 - Forensic Use of Password Crackers for Investigating Digital Crime			Take Quiz
	Lesson 7 - Filesystem Acquisition Using the RAM Disk in iOS Devices			Take Quiz
	Lesson 8 - Impact of Volatile & Non-Volatile Memory on Physical Acquisition in iOS Devices			Take Quiz
	Lesson 9 - Read-Only Memory (ROM): Definition & Types			Take Quiz
	Lesson 10 - Authenticating & Adding Users in Linux			Take Quiz
	Lesson 11 - Basics of the Macintosh OS for Digital Forensics			Take Quiz

Week {{::cp.getGoalWeekForTopic(4, 13)}}

Ch 5. Acquiring Data from iOS Backups {{cp.topicAssetIdToProgress[626695].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - iOS iTunes Backups: Creation, Process & Examples			Take Quiz
	Lesson 2 - iPhone Backup Structure: Differential Backup & Directory Types			Take Quiz
	Lesson 3 - System Backups in Linux: Definition & Significance			Take Quiz
	Lesson 4 - Data Storage Formats & Digital Forensics: Devices & Types			Take Quiz
	Lesson 5 - What is Cloud Storage? - Definition & Concept			Take Quiz
	Lesson 6 - Identifying & Extracting Data from iCloud Backups			Take Quiz
	Lesson 7 - What are Pairing Records? - Definition, Uses & Storage			Take Quiz

Week {{::cp.getGoalWeekForTopic(5, 13)}}

Ch 6. iOS Data Analysis & Recovery {{cp.topicAssetIdToProgress[626705].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Timestamps in iOS Devices: Definition, Types & Uses			Take Quiz
	Lesson 2 - SQLite Databases: Definition, Tools & Commands			Take Quiz
	Lesson 3 - Accessing Key Artifacts in iOS Database Files: Definition, Types & Location			Take Quiz
	Lesson 4 - Cache Memory: Definition & Concept			Take Quiz
	Lesson 5 - Accessing Property List Files for Mobile Forensics: Definition & Tools			Take Quiz
	Lesson 6 - What Are Web Cookies? - Use & Controversy			Take Quiz
	Lesson 7 - Recovering Data From Damaged Media			Take Quiz
	Lesson 8 - Using iOS Forensic Tools: Acquisition & Analysis Techniques			Take Quiz
	Lesson 9 - Required Assignments Reminder

Week {{::cp.getGoalWeekForTopic(6, 13)}}

Ch 7. Android Device Design & Security Overview {{cp.topicAssetIdToProgress[626717].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Layers of the Android Operating System: Identification & Usage			Take Quiz
	Lesson 2 - Android Devices & Linux Integration: Features & Explanation			Take Quiz
	Lesson 3 - Shell, Terminal, Bash & Kernel in Linux: Definition & Basic Commands			Take Quiz
	Lesson 4 - Hardware Abstraction: Definition & Purpose			Take Quiz
	Lesson 5 - Virtual Machines: Types & Life Cycle			Take Quiz
	Lesson 6 - Android Device Security: Design & Features			Take Quiz
	Lesson 7 - Access Control Matrix: Model & Example			Take Quiz
	Lesson 8 - What is Full Disk Encryption?			Take Quiz
	Lesson 9 - File Management in Linux Operating Systems			Take Quiz
	Lesson 10 - Creating & Managing Filesystems in Linux			Take Quiz

Week {{::cp.getGoalWeekForTopic(7, 13)}}

Ch 8. Extracting Data from Android Devices {{cp.topicAssetIdToProgress[626725].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Setting Up the Forensic Environment for Android Devices			Take Quiz
	Lesson 2 - Linux Commands for Managing Files & Directories			Take Quiz
	Lesson 3 - Techniques for Bypassing Android Screen & Passcode Locking Mechanisms			Take Quiz
	Lesson 4 - Gaining Root Access on Android Devices: Definition & Process			Take Quiz
	Lesson 5 - Data Extraction Techniques for Android Devices: Manual, Logical & Physical			Take Quiz
	Lesson 6 - ADB Pull Data Extraction from Android Devices: Explanation & Process			Take Quiz
	Lesson 7 - Content Providers & Android Devices: Definition & AFLogical			Take Quiz
	Lesson 8 - Obtaining Forensic Images from Android Devices			Take Quiz
	Lesson 9 - Joint Test Action Group (JTAG): Definition, Uses & Process			Take Quiz
	Lesson 10 - End-to-End Encryption: Email & Android			Take Quiz

Week {{::cp.getGoalWeekForTopic(8, 13)}}

Ch 9. Recovering & Analyzing Android Data {{cp.topicAssetIdToProgress[626743].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Adding & Analyzing an Android Image Using Autopsy			Take Quiz
	Lesson 2 - Recovering Data Deleted from SD Cards Using Android Devices			Take Quiz
	Lesson 3 - Recovering Android Internal Memory: Techniques & Challenges			Take Quiz
	Lesson 4 - Recovering Deleted SMS Android Data From SQLite Pages			Take Quiz
	Lesson 5 - Using File-Carving & Scalpel Techniques to Recover Android Device Data			Take Quiz
	Lesson 6 - Android Data Recovery: Using Google Account to Restore Contacts			Take Quiz

Week {{::cp.getGoalWeekForTopic(9, 13)}}

Ch 10. Android App Analysis, Malware & Reverse Engineering {{cp.topicAssetIdToProgress[626757].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Mobile App: Definition, Development & Management			Take Quiz
	Lesson 2 - Mobile Communication: Types, History & Timeline			Take Quiz
	Lesson 3 - Mobile Device Security Threats, Risks & Issues			Take Quiz
	Lesson 4 - Third-Party Data Apps for Android Devices: Types & Uses			Take Quiz
	Lesson 5 - Reverse Engineering in Digital Forensics			Take Quiz
	Lesson 6 - Reverse Engineering APK Files in Android Apps			Take Quiz
	Lesson 7 - Mobile Malware: Analysis & Detection			Take Quiz
	Lesson 8 - Android Malware: Infection, Spread & Impact			Take Quiz
	Lesson 9 - Mobile Malware: Protection & Removal			Take Quiz

Week {{::cp.getGoalWeekForTopic(10, 13)}}

Ch 11. Windows Phone Forensics {{cp.topicAssetIdToProgress[626765].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Windows Phone OS: History, Features & Common Applications			Take Quiz
	Lesson 2 - Windows Phone Security Model: Overview & Security Chambers			Take Quiz
	Lesson 3 - What is BitLocker Drive Encryption?			Take Quiz
	Lesson 4 - Using Windows Phone Filesystem in a Forensic Analysis			Take Quiz
	Lesson 5 - Acquiring Windows Phone Data: Tools & Techniques			Take Quiz
	Lesson 6 - Extracting Data From Windows Phones Without Commercial Tools			Take Quiz
	Lesson 7 - Locating & Extracting Forensic Artifacts from Windows Phones			Take Quiz

Week {{::cp.getGoalWeekForTopic(11, 13)}}

Ch 12. Parsing Third-Party Application Files {{cp.topicAssetIdToProgress[626779].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Parsing Third-Party Application Files on Mobile Devices: Definition & Types			Take Quiz
	Lesson 2 - Using Encoding & Encryption to Parse Data on Mobile Devices			Take Quiz
	Lesson 3 - Application Data Storage for Windows, Android & iOS Mobile Phones			Take Quiz
	Lesson 4 - Commercial Tools for Parsing Third-Party App Data in Mobile Phones: Types & Uses			Take Quiz
	Lesson 5 - Open Source Tools for Parsing Third-Party App Data in Mobile Phones: Types & Uses			Take Quiz

Week {{::cp.getGoalWeekForTopic(12, 13)}}

Ch 13. Required Assignments for Computer Science 335 {{cp.topicAssetIdToProgress[626791].percentComplete}}% complete

			Course Progress	Best Score
	Lesson 1 - Mobile Forensics - Assignment 1: Extracting Data From Mobile Devices
	Lesson 2 - Mobile Forensics - Assignment 2: iOS Case Study
	Lesson 3 - Mobile Forensics - Assignment 3: Virtual Labs

Course Objective

The objective of this course is to provide an overview of mobile forensics investigation techniques and tools. Topics include mobile forensics procedures and principles, related legal issues, mobile platform internals, bypassing passcode, rotting or jailbreaking process, logical and physical acquisition, data recovery and analysis, and reporting. The course will provide in-depth coverage of both iOS and Android platforms.

Grading Policy

Your grade for this course will be calculated out of 300 points. The minimum score required to pass and become eligible for college credit for this course is 210 points, or an overall course grade of 70%. The table below shows how your overall grade will be calculated.

	Possible Points
Quizzes	100
Assignment 1	40
Assignment 2	40
Assignment 3	20
Proctored Final Exam	100
Total	300

Quizzes

Quizzes are meant to test your comprehension of each lesson as you progress through the course. Here's a breakdown of how you will be graded on quizzes and how they'll factor into your final score:

You will have 3 attempts to take each quiz for a score.
The highest score of your first 3 attempts will be recorded as your score for each quiz.
When you've completed the course, the highest scores from your first 3 attempts at each quiz will be averaged together and weighed against the total possible points for quizzes. For instance, if your average quiz score is 85%, you'll receive 85 out of 100 possible points for quizzes.
After your initial 3 attempts, you can take a quiz for practice as many times as you'd like.
You will need to pass each quiz with a score of at least 80% to earn course progress for the lesson. However, it is not necessary to earn 80% within the first three quiz attempts.

Assignments

Assignments are intended to assess your application, analysis, and critical thinking skills in relation to the concepts you learn in the course. Three assignments are required for this course. You can access them here.

The assignments for this course involve completing 6 InfoSec Learning Labs. These labs add a completely virtual interactive application component to your coursework where you'll have the opportunity to apply what you learned in a real-world environment. Your work on them will contribute to your final grade.

All assignment scores will total up to 100 points.
Your assignment(s) will be graded by a Study.com instructor.
The instructor will provide a graded rubric for you along with feedback on what you did well and what could be improved.
If you are unsatisfied with your score, you will be able to revise and resubmit your assignment(s) twice. You are free to resubmit an assignment within two weeks of your most recent exam attempt or at any point if you have an active college accelerator membership.

Proctored Final Exam

The proctored final exam is a cumulative test designed to ensure that you've mastered the material in the course.

You'll earn points equivalent to the percentage grade you receive on your proctored final. (So if you earn 90% on the final, that's 90 points toward your final grade.)
If you're unsatisfied with your score on the exam, you'll be eligible to retake the exam after a 3-day waiting period.
You can only retake the exam twice, so be sure to use your study guide and fully prepare yourself before you take the exam again.

Items Allowed on Study.com Proctored Exam for Computer Science 335: Mobile Forensics:

Blank scratch paper
Pen or pencil

Items NOT Allowed on Study.com Proctored Exam for Computer Science 335: Mobile Forensics:

Office programs, web browsers, or any programs other than Software Secure (including Study.com lessons)
Textbooks (digital or physical)
Mobile phones, headphones, speakers, TVs, or radios
Notebooks or notes
Any calculators

Course Outcomes

Upon completion of the course, you will be able to:

Evaluate the basic principles of digital forensics, including the unique challenges of mobile forensics.
Apply the procedures of evaluation, validation, preservation, acquisition, examination, privileged control, analysis, and reporting of mobile devices and digital information.
Evaluate the extracted data to examine important case data, such as contacts, call logs, SMS, images, audio and video files, web history, passwords, and application data, using forensically sound and industry standard tools.
Examine the relationship between mobile and desktop devices pertaining to criminal and corporate investigations.
Investigate current incidents about mobile forensics.

Prerequisites

There are no prerequisites for this course, but most students prefer to complete Computer Science 110: Introduction to Cybersecurity and Computer Science 203: Defensive Security before taking this course.

Course Format

Computer Science 335: Mobile Forensics consists of short video lessons that are organized into topical chapters. Each video is approximately 5-10 minutes in length and comes with a quick quiz to help you measure your learning. The course is completely self-paced. Watch lessons on your schedule whenever and wherever you want.

At the end of each chapter, you can complete a chapter test to see if you're ready to move on or have some material to review. Once you've completed the entire course, take the practice test and use the study tools in the course to prepare for the proctored final exam. You may take the proctored final exam whenever you are ready.

How Credit Recommendations Work

This course has been evaluated and recommended by ACE for 3 semester hours in the upper division baccalaureate degree category. To apply for transfer credit, follow these steps:

If you already have a school in mind, check with the registrar to see if the school will grant credit for courses recommended by either ACE or NCCRS.
Complete Computer Science 335: Mobile Forensics by watching video lessons and taking short quizzes.
Take the Computer Science 335: Mobile Forensics final exam directly on the Study.com site.
Request a transcript to be sent to the accredited school of your choice!
Check out this page for more information on Study.com's credit-recommended courses.

Additional Information

Course Topics

Category	Objectives
Foundations of Digital Forensics	Outlines tools used in digital forensics, the rules that apply to issues in digital evidence and how the Internet of Things impacts Internet security.
Introduction to Mobile Forensics	Identifies challenges in mobile forensics investigations, the types of mobile operating systems and common case data types in investigations.
Examination of iOS Devices	Explains the different kinds of file systems, the components of iOS architecture and examples of threads in an operating system.
Acquiring Data from iOS Devices	Describes read-only memory (ROM), adding and authenticating users in Linux and logical acquisition for iOS devices.
Acquiring Data From iOS Backups	Details directory types in iPhone backup structure, data storage formats, cloud storage and pairing records.
iOS Data Analysis & Recovery	Explores cache memory, SQLite databases, recovering data from damaged media and using iOS forensic tools.
Android Device Design & Security Overview	Discusses full disk encryption, creating and managing filesystems in Linux and the layers of the Android operating system.
Extracting Data from Android Devices	Outlines end-to-end encryption, joint test action group (JTAG), data extraction techniques for Android devices and techniques to bypass Android screen and passcode locking mechanisms.
Recovering & Analyzing Android Data	Explains how to recover data deleted from SD cards using Android devices, file-carving/scalpel techniques to recover data and using autopsy to add and analyze Android images.
Android App Analysis, Malware & Reverse Engineering	Reviews reverse engineering in digital forensics and APK files; the analysis and detection of mobile malware; and security threats, issues and risks for mobile devices.
Windows Phone Forensics	Identifies BitLocker drive encryption, acquiring Windows phone data and locating/extracting forensic artifacts from Windows phones.
Parsing Third-Party Application Files	Discusses open source and commercial tools for parsing third party app data in mobile phones and using encryption and encoding to access data on mobile devices.

College Credit

Learn More

Start Earning College Credit Today

Learn more about the College Accelerator Plan

What to Expect For the Exam

This Study.com course has been evaluated and recommended for college credit. Once you've completed this course, you can take the proctored final exam and potentially earn credit. Follow the steps below to take the exam.

Exam Steps

Create Account

Take The Exam

Get Your Results

Pre-Exam Checklist

Before taking the exam, all of the following requirements must be met:

	A College Accelerator Study.com membership.
	Completed all lessons in Computer Science 335: Mobile Forensics course and achieved 100% Quiz Progress.
	Not attempted to take this exam within the last three days.
	Have available proctored exams in this month of membership.
	Have not taken this exam three times. (0/3)
	Complete the exam readiness quiz.
	Please note: Assignments are required to complete this course for credit. You have submitted / required assignments for this course.

Start Exam Registration

Please meet all of the pre-requirements in the Pre-Exam Checklist in order to take the exam.

Exam Process Details

1. Register For Exam

Registering for the exam is simple. First, be sure you meet the system requirements. Next, you'll need to agree to the academic integrity policy. Then just confirm your name and the exam name, and you're ready to go!

2. Download Software Secure

You'll receive an unique access code. Please write this down — you'll need it to take the exam. Then download Software Secure and follow the installation instructions.

3. Take Exam

The exam contains 50 - 100 multiple choice questions. You will have two hours to complete the exam, so don't start until you're sure you can complete the entire thing. And remember to pace yourself!

4. Get Exam Results

We will send you an email with your official exam results within 1 to 2 weeks. If you would like to raise your grade after receiving your exam results, you can retake quizzes with fewer than 3 attempts. You will then need to retake the final exam.

Earning Credit

Earning College Credit

Did you know… We have over 200 college courses that prepare you to earn credit by exam that is accepted by over 1,500 colleges and universities. You can test out of the first two years of college and save thousands off your degree. Anyone can earn credit-by-exam regardless of age or education level.

To learn more, visit our Earning Credit Page

Transferring credit to the school of your choice

Not sure what college you want to attend yet? Study.com has thousands of articles about every imaginable degree, area of study and career path that can help you find the school that's right for you.

Research Schools, Degrees & Careers

Get the unbiased info you need to find the right school.

Browse Articles By Category

Browse an area of study or degree level.

Area of Study

Degree Level

Computer Science 335: Mobile Forensics