NET 380 - Mobile Device & IoT Forensics

Credits: 4
Lecture Hours: 2
Lab Hours: 4
Practicum Hours: 0
Work Experience: 0
Course Type: Open

This course serves as a technical introduction to the forensic process involved in the imaging, searching and processing of mobile devices and IoT devices. Topics covered in the course include a strong emphasis on acquisition of mobile and IoT evidence, file system interrogation, memory and storage capabilities.
Prerequisite: NET 373
Competencies

Describe the various communication protocols associated with mobile and IoT devices
Analyze devices to determine the acquisition methods
1. Contrast the output of the different methods
2. Distinguish the acquisition method based on the type of device
Apply the methods of mobile device forensic acquisitions
1. Demonstrate logical acquisitions
2. Demonstrate physical acquisitions
Demonstrate methods of IoT device forensics acquisitions
1. Cite the methods for acquiring data from damaged devices
2. Describe appropriate methods for securing and transporting evidence
Explain the various types of memory and storage utilized with mobile and IoT devices
Explain the file system structures of mobile and IoT devices
1. Describe the structure of iOS devices
2. Discuss the structure of Android devices
3. Summarize the structure of Linux IoT devices
Describe required hardware and software for mobile and IoT forensic investigations
Analyze mobile and IoT data
1. Differentiate the type of stored information
2. Parse SQlite database information
3. Classify raw or proprietary data formats
4. Compare the results of common analysis software for mobile and IoT devices

Competencies Revised Date: AY2025