Unit 01 · 1 h 40 min
How phones are built to defend
Sandboxes, secure hardware and verified boot, and why rooting or jailbreaking quietly removes them.
Mobile Device Security
Secure iPhones and Android phones the way an IT team does: apps, updates, spyware, SIM swaps and a whole fleet.
- Time
- 12 h 15 min
- Lessons
- 40
- Machine
- In your browser
What you earn
RootCertificateMobile Device Security, certificate of completion GIACGMOBGIAC Mobile Device Security Analyst
Prepares you for GIAC Mobile Device Security Analyst. Root is not affiliated with these issuers.
You will be able to
- Inspect an Android phone from a shell and audit its apps and permissions
- Find phones that fell behind on updates and enforce deadlines
- Protect high-risk people with Lockdown Mode and Advanced Protection
- Stop smishing, QR lures and SIM swaps from becoming account takeovers
- Run the first hour after a lost or compromised phone
Units and lessons
Unit 02 · 1 h 52 min
Apps and permissions
What app review misses, how sideloaded apps and broad permissions take over a phone, and how to clean up.
- 1Where did this app come from20 min · virtual lab
- 2Auditing permissions20 min · virtual lab
- 3Accessibility and overlay abuse18 min · virtual lab
- 4Configuration profiles on iPhone16 min · virtual lab
- 5Cleaning up and locking it down18 min · virtual lab
- 6Case file: a clean app with a dirty library20 min · virtual lab
Unit 03 · 1 h 43 min
Updates are the main defence
Read patch levels, find phones that fell behind, and enforce deadlines before the next zero-click flaw.
- 1Reading a patch level15 min · virtual lab
- 2Finding late Android phones16 min · virtual lab
- 3Why zero-click flaws make speed matter16 min · virtual lab
- 4Enforcing deadlines with MDM20 min · virtual lab
- 5How long phones get updates16 min · virtual lab
- 6Case file: the February 2026 iPhone fix20 min · virtual lab
Unit 04 · 1 h 29 min
Protecting high-risk people
Decide who is high risk, switch on Lockdown Mode and Advanced Protection, and handle a spyware warning calmly.
Unit 05 · 1 h 33 min
Smishing, SIM swaps and account recovery
Texts, QR codes and phone numbers are how accounts get taken. Spot the lures and remove the weak links.
Unit 06 · 1 h 24 min
Networks, messages and data
What public Wi-Fi and VPNs really change, why SMS is a postcard, and how to protect the data on a phone that goes missing.
Unit 07 · 1 h 16 min
Managing a fleet of phones
Enrolment types, work profiles, compliance rules and offboarding: the controls that make everything else enforceable.
Unit 08 · 1 h 18 min
Capstone: review the fleet, write the policy
Pull every finding together for Kestrel's 30 phones and turn it into a one-page mobile policy.
Eight units around Kestrel Field Services and its 30 phones. Every lab runs in your browser, with real incidents as case files.