Skip to content
Quest Training

Computer & Mobile Device Forensics Training Course

Teaches how to acquire, verify and examine evidence from computers, smartphones and tablets, including file systems, deleted data and application artefacts.

DFCI · Digital Forensics & Cybercrime InvestigationAll Levels#2523ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Information Technology & CybersecurityCategories:Digital Forensics & Cybercrime Investigation

Course Overview

This advanced practical training course provides a structured approach to computer and mobile device forensics, focusing on the identification, preservation, acquisition, examination, and analysis of digital evidence from computers, smartphones, tablets, and associated storage media. The programme covers forensic acquisition, evidence integrity, file systems, operating system artefacts, user activity, deleted data, application artefacts, mobile device data, communications, location information, media files, and device-specific evidence. It also addresses chain of custody, evidence validation, forensic documentation, and the reconstruction of digital activity. Through practical investigation scenarios, participants work with computer and mobile evidence to identify relevant artefacts, correlate information from multiple sources, reconstruct timelines, recover relevant data, and produce technically supported findings suitable for cybersecurity investigations, internal investigations, compliance, and legal processes.

Learning Objectives

  • Analyse the principles and methodologies of computer and mobile device forensics.
  • Identify and preserve digital evidence from computers and mobile devices.
  • Apply appropriate procedures for evidence acquisition and forensic imaging.
  • Verify evidence integrity using appropriate validation techniques.
  • Examine computer file systems, operating system artefacts, and user activity.
  • Analyse deleted files, metadata, system records, and application artefacts.
  • Examine mobile device data, applications, communications, and media.
  • Analyse location-related information and device activity where available.
  • Correlate computer and mobile evidence to reconstruct events and user activity.
  • Apply forensic techniques for evidence recovery and timeline reconstruction.
  • Document forensic procedures, observations, findings, and supporting evidence.
  • Develop an integrated investigation workflow for computer and mobile device forensic cases.

Who Should Attend

This course is designed for digital forensic investigators, cybersecurity professionals, incident responders, security analysts, IT auditors, system administrators, and technical investigators involved in examining computers and mobile devices. It is also suitable for law enforcement and regulatory professionals, internal investigation teams, compliance specialists, cybersecurity managers, and IT professionals who require practical capabilities in collecting, examining, and interpreting computer and mobile device evidence. The programme is particularly relevant to organizations seeking to strengthen digital investigation capabilities, improve evidence handling, support incident response, and establish structured forensic procedures for endpoint and mobile device investigations.

Learning Outcomes

  • Explain the forensic investigation lifecycle for computers and mobile devices.
  • Identify relevant evidence sources across computer and mobile environments.
  • Preserve digital evidence while maintaining its integrity and evidential value.
  • Perform or support forensic acquisition and imaging procedures.
  • Examine computer file systems and operating system artefacts.
  • Analyse user activity, application data, metadata, and system records.
  • Examine mobile device applications, communications, media, and related artefacts.
  • Identify and recover relevant deleted or hidden information where technically possible.
  • Analyse location and device activity data where available.
  • Correlate evidence from multiple devices and sources to reconstruct events.
  • Build investigative timelines based on correlated digital artefacts.
  • Prepare clear, technically supported forensic findings and investigation reports.

Course Outline

Day 1

Computer & Mobile Forensics Principles, Evidence & Acquisition

  • Computer and mobile device forensic concepts
  • Digital evidence sources and investigative objectives
  • Computer and mobile forensic investigation lifecycle
  • Evidence identification and preservation
  • Evidence integrity and validation
  • Chain of custody and forensic documentation
  • Forensic workstations and controlled examination environments
  • Acquisition planning and evidence prioritization
  • Forensic imaging principles
  • Practical Application: Develop an evidence acquisition and preservation plan for a computer and mobile device investigation
Day 2

Computer Forensics & Operating System Artefact Analysis

  • Computer storage structures and file systems
  • Partitions, files, directories, and metadata
  • Operating system forensic artefacts
  • User accounts and system activity
  • System logs and event records
  • Application and execution artefacts
  • Browser activity and downloaded content
  • Deleted files and unallocated space
  • Data recovery and evidence validation
  • Practical Application: Examine a forensic image and identify system, user, application, and file system artefacts relevant to an investigation
Day 3

Mobile Device Forensics & Application Evidence

  • Mobile forensic principles and challenges
  • Smartphone and tablet evidence sources
  • Device acquisition approaches
  • Mobile operating system artefacts
  • Application data and user activity
  • Call records, contacts, and messaging evidence
  • Email and communication applications
  • Photos, videos, documents, and media metadata
  • Location and device activity information
  • Practical Application: Examine a mobile evidence set and identify relevant application, communication, media, and activity artefacts
Day 4

Evidence Correlation, Data Recovery & Timeline Reconstruction

  • Deleted and recoverable digital information
  • Advanced artefact examination
  • Metadata and timestamp analysis
  • Correlating computer and mobile evidence
  • Network and communication-related evidence
  • Identifying suspicious activity and investigative indicators
  • Event correlation and timeline construction
  • User and device activity reconstruction
  • Evidence gaps and validation
  • Practical Application: Correlate evidence from multiple devices to reconstruct a sequence of events and identify investigative findings
Day 5

Advanced Investigation, Reporting & Case Management

  • Forensic analysis methodology and investigative reasoning
  • Evidence prioritization and hypothesis development
  • Cross-device evidence correlation
  • Validating investigative conclusions
  • Forensic case management
  • Documentation of procedures and findings
  • Forensic report structure and technical conclusions
  • Presenting evidence and investigative results
  • Quality assurance and defensibility of forensic examinations
  • Final Workshop: Conduct an integrated computer and mobile device forensic investigation covering evidence preservation, acquisition, examination, correlation, timeline reconstruction, findings, and final reporting

Upcoming Dates

Selected date

Istanbul · 24 – 28 May 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
DohaScheduled
2 – 6 Nov 2026€4,700—
SelectDownload Brochure
DubaiScheduled
8 – 12 Nov 2026€4,700—
SelectDownload Brochure
GenevaScheduled
16 – 20 Nov 2026€7,300—
SelectDownload Brochure
IstanbulScheduled
23 – 27 Nov 2026€5,300€4,770until 2 Nov
SelectDownload Brochure
Kuala LumpurScheduled
23 – 27 Nov 2026€4,700€4,230until 2 Nov
SelectDownload Brochure
LisbonScheduled
30 Nov – 4 Dec 2026€6,000€5,400until 9 Nov
SelectDownload Brochure
LondonScheduled
7 – 11 Dec 2026€5,800€5,220until 16 Nov
SelectDownload Brochure
MadridScheduled
14 – 18 Dec 2026€6,000€5,400until 23 Nov
SelectDownload Brochure
MakkahScheduled
21 – 25 Dec 2026€4,800€4,320until 30 Nov
SelectDownload Brochure
ManamaScheduled
28 Dec 2026 – 1 Jan 2027€5,300€4,770until 7 Dec
SelectDownload Brochure
MarrakeshScheduled
4 – 8 Jan 2027€4,700€4,230until 14 Dec
SelectDownload Brochure
MilanScheduled
4 – 8 Jan 2027€7,000€6,300until 14 Dec
SelectDownload Brochure
MunichScheduled
11 – 15 Jan 2027€6,000€5,400until 21 Dec
SelectDownload Brochure
MuscatScheduled
18 – 22 Jan 2027€6,300€5,670until 28 Dec
SelectDownload Brochure
OnlineScheduled
24 – 28 Jan 2027€2,700€2,430until 4 Jan
SelectDownload Brochure
ParisScheduled
1 – 5 Feb 2027€6,700€6,030until 11 Jan
SelectDownload Brochure
RiyadhScheduled
8 – 12 Feb 2027€4,800€4,320until 18 Jan
SelectDownload Brochure
RomeScheduled
15 – 19 Feb 2027€7,000€6,300until 25 Jan
SelectDownload Brochure
SalalahScheduled
22 – 26 Feb 2027€6,300€5,670until 1 Feb
SelectDownload Brochure
SingaporeScheduled
22 – 26 Feb 2027€8,000€7,200until 1 Feb
SelectDownload Brochure
TrabzonScheduled
1 – 5 Mar 2027€5,300€4,770until 8 Feb
SelectDownload Brochure
TunisiaScheduled
8 – 12 Mar 2027€4,300€3,870until 15 Feb
SelectDownload Brochure
ViennaScheduled
15 – 19 Mar 2027€6,400€5,760until 22 Feb
SelectDownload Brochure
AmmanScheduled
21 – 25 Mar 2027€4,000€3,600until 1 Mar
SelectDownload Brochure
AmsterdamScheduled
29 Mar – 2 Apr 2027€6,000€5,400until 8 Mar
SelectDownload Brochure
BakuScheduled
5 – 9 Apr 2027€5,300€4,770until 15 Mar
SelectDownload Brochure
BarcelonaScheduled
12 – 16 Apr 2027€6,000€5,400until 22 Mar
SelectDownload Brochure
CairoScheduled
12 – 16 Apr 2027€3,800€3,420until 22 Mar
SelectDownload Brochure
CasablancaScheduled
19 – 23 Apr 2027€4,700€4,230until 29 Mar
SelectDownload Brochure
DammamScheduled
26 – 30 Apr 2027€4,800€4,320until 5 Apr
SelectDownload Brochure
IstanbulScheduled
24 – 28 May 2027€5,300€4,770until 3 May
✓ SelectedDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team