GK200 is an intermediate-level four-day training course, taught by Magnet Forensics, designed for participants who are familiar with the principles of digital forensics and are seeking to expand their knowledge base into iOS and Android examinations using Magnet Graykey. Students must be part of a law enforcement agency and must be cleared in advance to attend this course.
In this course, you will get hands-on use of the Graykey device and learn how to fully operate it—including how to establish a proper workflow for handling iOS and Android devices both in the field and in the lab and leveraging the Graykey to obtain crucial data from mobile-type devices.
Magnet Axiom will also be leveraged to learn how mobile file systems are structured and how to locate key data. In addition, students will learn about artefacts specific to the extraction outputs of Magnet Graykey and the differing levels of data protection implemented on modern mobile devices. From Keychain and Keystores, to advanced methodologies to uncover operating system artifacts, students will learn how to effectively and efficiently deal with data from mobile devices, no matter the extraction level and/or device state.