Mobile Device Acquisition and Analysis
Course details
2026
| Session(s) | Location | Start date | End date |
|---|---|---|---|
| 26-01 English | Ottawa | 2026-06-16 | 2026-06-25 |
| 26-02 English | Ottawa | 2026-09-08 | 2026-09-17 |
| 26-03 English | Ottawa | 2026-12-01 | 2026-12-10 |
| Tuition |
|---|
| $5,275.00 |
Notes
- Accommodations are offered to course participants. Our rooms are subject to availability and the request must be indicated on the course registration form
- Meal plans are offered to course participants. The specific meal plan must be indicated on the course registration form
- Travel grant funding is available to our non-federal law enforcement agencies
2027
| Session(s) | Location | Start date | End date |
|---|---|---|---|
| 27-01 English | Ottawa | 2027-04-06 | 2027-04-15 |
| 27-02 English | Ottawa | 2027-09-28 | 2027-10-07 |
| 27-03 English | Ottawa | 2027-11-23 | 2027-12-02 |
| Tuition |
|---|
| $5,500.00 |
Notes
- Accommodations are offered to course participants. Our rooms are subject to availability and the request must be indicated on the course registration form
- Meal plans are offered to course participants. The specific meal plan must be indicated on the course registration form
- Travel grant funding is available to our non-federal law enforcement agencies
Description
The Mobile Device Acquisition and Analysis (MDAA) course is designed to train and support police investigators and digital forensic analysts responsible for the seizure, extraction, analysis, interpretation and presentation of digital evidence obtained from mobile devices throughout the process of an investigation.
As cybercrime continues to emerge as one of the fastest growing categories of crime in Canada, the widespread use of mobile devices is contributing to evolving criminal trends and increasingly complex investigative landscapes. In 2025, Canada reported approximately 38.02 million mobile phone subscribers. When further enhanced by multi-device usages, the total number of mobile connections in Canada exceeds 104% of our national population. These escalating levels of technology adoption highlight the significant and centralized role that mobile devices now play as sources of evidence in everyday investigations.
In response to emerging operational realities in the field of digital forensics, the MDAA course provides participants with the foundational knowledge and skills necessary to lawfully seize and preserve evidence from mobile devices and present these findings. Using an approach that aligns mobile forensics with the full scope and process of a criminal investigation, participants will learn to:
- acquire mobile data from live and a previously uncharged devices to prevent loss of evidence
- analyze data extracted; and
- document and present extracted mobile device findings
Using a combination of technical instruction, self-directed learning, analytical problem-solving, and hands-on practical exercises and scenarios, participants will familiarize themselves with the different technologies available to assist the mobile device extraction process, practice the necessary hands-on application of skills to effectively obtain evidence from mobile devices, analyze and communicate their findings to others, and build a comfort in attempting to ascertain evidence using new products and methodologies.
Laboratory training is guided through the use of specialized tools, software, investigative techniques, and forensically sound processes designed to develop the technical proficiencies required for mobile device acquisition and analysis. This course will equip participants with the knowledge and competencies necessary to conduct a comprehensive mobile device investigation in adherence to pre-established digital forensic best practices.
Format and delivery
- Length of course
-
8 days
- Class size
- Maximum of 20 participants
- Delivery setting
-
Delivered in-person in a computer classroom
Learning outcomes
- Assist investigators with mobile device seizure and handling
- Acquire mobile device data in accordance with a search warrant
- Analyze mobile device data in accordance with a search warrant
- Report on mobile device exhibit handling, extractions, and data analysis
- Testify on mobile device exhibit handling, extractions, and data analysis
Eligibility and mandatory requirements
- This course is offered to digital forensic analysts working in a technological crime investigative unit or program
- Prior to applying to this course, registrants are strongly encouraged to be trained on the use of at least one commercial digital forensics extraction tool and at least one commercial digital forensics analysis software package
- During the in-person portion of the course, the Canadian Police College will provide the following tools and software:
- Extraction: Cellebrite Inseyets, MSAB XRY, Magnet AXIOM
- Analysis: Cellebrite, Inseyets, MSAB XAMN, Magnet AXIOM
- Acceptance or refusal in the course is at the discretion of the Canadian Police College
Assessment
- Success in the course is based on attendance, participation in the classroom and successful completion of all required assignments and learning evaluations
- Various evaluation methods are used, including practical exercises, quizzes, and assignments
- Re-testing or re-evaluation is conducted in accordance with the CPC Academic Directives and at the discretion of the Canadian Police College
Contact
For more details or other information about the course, please email the CPC Registrar at cpc_registrar-registraire_ccp@rcmp-grc.gc.ca.
- Date modified: