JTAG 2.0 Forensics

Training with Certification

New JTAG 2.0 Forensics with Certification

In the new Teel Tech five-day JTAG 2.0 Forensics Course, students learn the latest techniques for accessing mobile devices using the JTAG technique for data recovery and device unlocking. The newly designed course incorporates the new Teel Tech JTAG Forensic Certification “TJFC” test, as an option for students. All students receive a Certificate of Attendance, and those who pass the practical examination successfully will earn their TJFC.

In the new JTAG 2.0 course, students learn the latest about today’s memory, and where JTAG is useful for data recovery from mobile phones and other devices.

New Class Add-ons

  • New probing processes
  • Password recovery on newer devices
  • New soldering processes
  • Students learn on Z3X box, in addition to the Riff
    Information on new equipment

Why do we need JTAG?

JTAG can help us get into these phones:

  • Locked Android cell phones with USB Debugging turned off.
  • Locked Windows phones.
  • Locked proprietary OS phones.
  • Physical memory acquisition when commercial tools come do not.
  • Damaged or broken phones.

The comprehensive course enables investigators to learn and build on the required soldering skills and JTAG access options through practice and many practical exercises. Students leave class with a full skill set to continue on and performing JTAG back at the lab.

  • Disassembly and assembly of devices.
  • Extensive soldering lessons, as well as using Molex Adapters.
  • Identify the test access points (TAPs) using various means, as well as the supplied Z3X Box
    eMMC Reads – Working directly with eMMC partitions on live phones to save only the data you need.
  • Production of a physical dump of a locked/disabled USB Android phone, identification of the password, and then restore user data by using your forensics tools.
  • Utilizing Python scripts for recovering pattern/pin locks. Introductory information using open source scripts.
  • Learn how to use commercial tools with JTAG dumps, such as UFED PA, Magnet IEF, Oxygen Detective.
  • Students are provided with multiple devices to perform JTAG examinations.
  • All students receive Certificate of Participation
  • Students Receive the complimentary Teel Tech Europe JTAG RIFF Kit, as well as UFED PA, Magnet IEF, Belkasoft, and Oxygen demo licenses.
  • Final Practical Exam to Earn the Teel JTAG Forensic Certification “TJFC” consists of a fully assembled locked device that students disassemble, perform the JTAG acquisition to acquire the raw data, and retrieve pattern lock. Students reassemble the device, power up, and unlock the device with the acquired pattern lock code.
    New Molex adapter connections – Some phones allow connection without soldering, these techniques are addressed.
    eMMC Reads – Working directly with eMMC partitions on live phones to save only the data you need.
    Identify the test access points (TAPs) using various techniques and tools.
    Utilizing Python scripts for recovering pattern/pin locks. Introductory information using open source scripts.
    Advanced HashCat processing for pattern/PIN password lock the new style Android OS phones.
    Implementation of JTAG support in Cellebrite to RAW – to decode dumps.

Teel Tech JTAG Chip-off Student Training 2In the class, students use today’s tools with features for assisting in analyzing JTAG data, including UFED Physical Analyzer and IEF Forensics. Trial versions of each software are provided to students in class, along with the Riff Box and Molex connectors.

New Class Add-ons

  • New probing processes
  • Password recovery on newer devices
  • New soldering processes
  • Students learn on Z3X box, in addition to Riff
  • Information on new equipment

Included with Training

FREE! Students receive with training:

  • RIFF Box 2.0 Kit
  • RIFF 2 ISP-JTAG adapter board w/cable
  • Teel Tech Canada Soldering Training Board
  • JTAG/ISP adapter board
  • JPIN JTAG Molex Flex Cable 35-in-1 with JTAG-ISP 5-in-1 Adapter kit

Laptop Minimum Requirements

We encourage students to bring their own laptops whenever possible. If this is not possible, Teel Technologies Europe will provide one for you. If you are bringing your own laptop, please indicate it on the class registration form.

Below you will find our list of laptop requirements; please ensure the following requirements are met.

For instruction on How to Turn off Driver Signature Enforcement on Windows 8.x – 10.x, follow our easy 6 Step Guide.

 Laptop Requirements

  • Windows 7
  • Windows 8.x and 10.x
  • macOS with Bootcamp Windows 7
  • macOS with Bootcamp Windows 8.x and Win 10.x
  • macOS alone will not work (No Virtual Machines)
  • 8GB RAM (minimum)
  • 100GB storage (minimum)
  • You must have admin rights or have the admin password for software installation.
  • NOTE: ALL Windows updates should be done prior to class.

 Optional

    • Cellebrite P.A. Dongle
    • Encase, FTK, X-Ways Dongle
    • Access to a HEX editor
    • External USB 3.0 Storage Device