Sign in

OCFI-C | Mobile & Network Forensics

Authorize Final Phase. OCFI-C addresses the most volatile and critical vectors of modern crime: Smartphones and Network Traffic. You will transcend traditional disk forensics to analyze iOS and Android backups, decrypting SQLite databases to reconstruct communication history. Simultaneously, you will master Network Forensics, dissecting PCAP files to identify malware beacons and data exfiltration. This unit culminates in the “Final Case Report,” certifying your ability to correlate evidence across all three phases into a court-admissible legal document.

OCFI

Operator Profile

Target Audience

  • Graduates of OCFI-B (Phase 02).
  • Mobile Security Researchers.
  • SOC Analysts tracking active threats.
  • Private Investigators tracking communications.
  • Legal teams requiring digital proof.

Objectives

What I will learn?

  • Analyze Android & iOS backup structures.
  • Extract chat logs from SQLite databases.
  • Dissect Network PCAPs for malware traffic.
  • Identify data exfiltration signatures in logs.
  • Write court-admissible forensic reports.

Recommended PRE-REQUISITE

Requirements

  • Critical: Completion of OCFI-B Unit.
  • Basic understanding of networking concepts is recommended
  • Wireshark installed (free and cross-platform)
  • Kali Linux or a Linux VM (for TcpDump and TShark exercises)
  • A computer with internet access for live capture testing

Module Skill level

Expert

EXCLUSIVE RESOURCES |

EXCLUSIVE RESOURCES |

This module is included in the OCFI certification bundle.

View OCFI program
  • Level
    Expert
  • Total Enrolled
    5
  • Duration
    14 hours30 minutes
  • Last Updated
    January 28, 2026
  • Certificate
    Certificate of completion

Course Prerequisite(s)

Course Curriculum

Introduction to Ethical Hacking and Network Security
Start your cybersecurity journey by understanding the core principles of ethical hacking and the OSI model, the foundation of all network communications. This section introduces what ethical hackers do, why network security is critical, and how layered protocols work together to transmit data.

  • What is Ethical Hacking and Network Security
    10:00
  • OSI Model
    32:00

Packet Analysis and Networking
This section builds your foundational understanding of how data moves across networks and how to observe it through packet analysis. You’ll learn the purpose of packet inspection, how to distinguish between network layers, and how different devices (hubs, switches, routers) affect traffic flow and classification. Perfect for beginners stepping into network security, ethical hacking, or traffic monitoring.

Understanding Layers 1, 2, 3: Hubs, Switches, and Routers
Dive into the first three layers of the OSI model—physical, data link, and network—and see how different devices function at each level. You'll explore the roles of hubs, switches, and routers, how they forward or filter traffic, and how attackers exploit weaknesses in these devices. This lecture includes practical comparisons, topology diagrams, and use cases in both enterprise and home networks. Key topics: OSI Layer 1–3 overview Hubs vs Switches vs Routers MAC addresses, ARP, and IP routing Real-world network setups and attack surfaces Traffic visibility and control at each layer

Sniffing
This section explores sniffing techniques, how data packets are intercepted across networks, and the tools and methods ethical hackers use to analyze traffic. You’ll learn how attackers exploit basic network behaviors and how to replicate these actions in controlled environments.

Getting Started with Wireshark
This section introduces Wireshark, the most powerful and widely used packet analyzer. You'll learn why it's essential for network analysis, how to install it on various systems, set up capture interfaces, and customize it for efficient workflow.

Capturing Packets in Wireshark
In this section, you'll gain full control over capturing network packets in Wireshark. You'll learn how to configure interfaces, apply filters, manage capture settings, and save or merge packet data for later analysis. Mastering these skills will make your packet captures cleaner, more focused, and easier to interpret.

Command-Line Packet Analysis: TcpDump & TShark
This section introduces two of the most powerful command-line tools for packet capture and analysis: TcpDump and TShark. These lightweight utilities are ideal for headless systems, remote forensic tasks, and automated traffic monitoring. You'll learn how to install them, capture traffic, apply filters, and interpret results from the terminal.

Network Layer Structures and Operations
This section dives deep into packet structure and communication behavior across key protocols in the network and transport layers, including ARP, IP, TCP, UDP, DHCP, and HTTP. You'll learn both theory and practical packet-level analysis, preparing you for real-world forensic investigation and traffic dissection.

Advanced Insights with Packet Analysis
This section showcases the power of packet-level analysis in uncovering hidden behaviors, failed attacks, and scanning attempts. You'll learn how to interpret subtle protocol signals and decode intent using Wireshark—proving that in cybersecurity, packets never lie.

149,00 $
  • Level
    Expert
  • Total Enrolled
    5
  • Duration
    14 hours30 minutes
  • Last Updated
    January 28, 2026
  • Certificate
    Certificate of completion

Want to receive push notifications for all major on-site activities?

✕