Mobile Device Forensics 101

Your phone knows more about you than your closest friend. Where you went last Tuesday, who you messaged at 2 AM, which Wi-Fi you joined at the hotel. It's all on the device, waiting to be read. This 3-hour workshop is a hands on introduction to mobile device forensics on iOS and Android using only free and open-source tools. No expensive enterprise kit required.


The first 90 minutes is a guided walkthrough of the acquisition and analysis of the artifacts that answer investigative questions. The second 90 minutes is a CTF. You get real evidence set, register on the CTF platform, and race the room to extract flags from iOS and Android images. Winner gets a prize.

Level: Beginner. Comfortable in a Linux/macOS terminal is enough. Bring your own laptop, a Linux VM is fine.

No phones harmed during the workshop.