Menu
Elusive Data’s Mobile Device Forensics course is designed for professionals who work directly with smartphones in investigative contexts. From Android to iOS, mobile ecosystems are constantly changing, and so are the techniques needed to access, preserve, and analyze their data.
This course gives you a solid foundation in mobile acquisition methods, teaches you how to handle locked or encrypted devices, and helps you go beyond tool output with hands-on labs that reflect real investigative challenges.
24 CPE credits. Course author: James Eichbaum
This course is designed for:
Join instructor-led sessions remotely. Join one of our scheduled classes or customize for your team.
Price per participant
On-site training for teams. We tailor delivery and scope to your organization’s needs. Contact us for a custom quote.
For teams
This course is created by James Eichbaum, a former law enforcement examiner and one of the most experienced instructors in mobile forensics.
With over a decade of global training experience, including Global Training Manager at MSAB, he’s trained thousands of professionals across 30+ countries, from local police units to national labs.
James has led real investigations and testified in court. His training reflects that experience: practical, structured, and focused on what actually works. Every lesson is designed to help you recover mobile app data manually, understand what it means, and explain it clearly — whether you’re writing a report, answering a QA review, or testifying on the stand.
We’ve trained thousands of professionals, and these are the most common questions we hear before they enroll, from what’s in the course to how it fits into busy caseloads.
On-Demand: Access all 24 hours of content at your own pace. Ideal for working professionals who want flexibility to train between active cases.
Live Online: Instructor-led sessions conducted remotely. Timing can be customized for your team — from full-day intensives to shorter sessions across multiple weeks.
In-Person: Delivered onsite over 3 days. We tailor the format and depth to match your team’s availability, goals, and existing skill level.
No. You’ll get step-by-step guidance with just enough technical depth to understand and explain your findings — even if you're not a developer.
Yes. The course is certificate-based and designed by a former law enforcement examiner with real testimony experience. The workflows taught are courtroom-ready and built to hold up under review.
Yes. The course is built around real-world app data, not generic examples. You’ll learn practical workflows you can apply immediately — even when your tools fall short.
Perfect. This course complements those tools — not replaces them. You’ll learn how to validate, go deeper, and recover what your tools might miss.
This course is built for real-world mobile forensic work — not just theory. It goes deep into SQLite analysis, especially where tools fall short. You’ll learn to extract and explain data from unsupported or complex apps using courtroom-ready workflows.
Designed by a former law enforcement examiner and one of the most experienced trainers in the field, the course blends hands-on labs, real case examples, and structured learning you can apply immediately. It’s one of the few on-demand trainings that offers this level of depth, flexibility, and legal relevance — ideal if you're ready to specialize and build skills that stand up in court.
Be the first to hear about new training opportunities, free tools, case-based blog posts, and practical insights. Our monthly newsletter is built to help you learn faster, solve cases smarter, and keep up in a field that never stands still.
Fill in your email to sign up.
Learn by doing the way that fits you, and gain practical skills you can use immediately.
Learn from experience. Our instructors bring decades of hands-on experience from both investigations and training, and still work on active cases. Get expert guidance that keeps your skills sharp and your knowledge fresh, in a field that never stands still.
Pick short, focused micro-lessons when time is tight. Go at your own pace with on-demand courses. Join a live online class, or bring the classroom to your team. Learn the way that fits you, without affecting your work or investigations.
No matter the format, each course gives you tools and techniques you can use right away. Work through interactive labs, CTF challenges, and exercises built on real case data, grounded in the realities of digital investigations.
Complete any course to receive a certificate that proves your skills in that specific area. Log your hours as CPE credits and use them toward your certification renewals.
Submit your request for Training. This is not a binding registration, we will get back shortly.
What I liked most was that it wasn’t a ‘click here, get data’ kind of training. We learned how app data is actually structured, and why tools miss things. I’ve already gone back to an old case and found new artifacts just because now I knew where to look.