Nordic Computer Forensic Investigators - Module 1 Core Concepts in Digital Investigation and Forensics

Study information

• Your learning outcomes

  General competence

  After completion of the module candidates will:

  • perform professional and research tasks in digital policing
  • see the role of digital policing in a broader perspective during an investigation

  
  Knowledge

  After completion of the module candidates will have knowledge about:

  • digital forensic methodologies and their application
  • computer and network components
  • cybercrime and anti-forensics
  • the ACPO Principles of digital evidence
  • the benefits of open source software in investigation

  
  Skills

  After completion of the module candidates will be able to:

  • interpret information stored in a digital system
  • use Linux as a digital investigative platform
  • conduct online investigations
  • use digital forensic tools to analyse file systems
  • apply the digital forensic methodology in all forensic analysis tasks
  • report technical findings

• Admission criteria

  The primary target group is police staff in the Nordic countries whose main task is or will be handling and investigating digital evidence.
  
  Employees in other International police services or governmental agencies who work or will work with digital evidence are also eligible to apply. 

  Applicants must be recommended by the employer.

  Applicants are required to provide the following documentation:

  • Higher Education Entrance Qualification
  • Current employment in a governmental agency 

  
  Applicants who do not have the higher education entrance qualification have to provide:

  • a minimum of 5 years relevant work experience, of which maximum 2 years can be relevant education
  • Meet the English proficiency requirements

  This arrangement only applies to applicants over the age of 25. 

• Practical information

  The education is organised as an online part-time programme and must be completed within 5 months. The scope of further education is estimated to be approx. 420 hours of study.

  This education includes participation in up to five days of mandatory lectures. This amounts to approximately 40 hours of study. 100% participation is required at these events.

  The mandatory reading shall not exceed 975 pages.

  The student needs to pass a number of course requirements in order to sit the exam.

  The module is concluded with a two-part exam:

  • an individual practical take-home exam over 6 hours
  • an individual theoretical take-home exam over 6 hours

  Both parts of the exam must be passed in order to successfully complete the module. Students will be graded on a Pass / Fail scale.

• Schedule for tuition and exam

  Atumn 2024

  Exam:
  Location: Online
  Date: 10.12.2024-11.12.2024

  Compulsory education
  Location: Online*
  Date: 14.11.2024-18.11.2024*

  *Some countries have other dates
  Portugal (Portuguese Students only): TBC
  Poland (Polish Students only): TBC

  Spring 2024

  Exam:
  Location: Online, some onsite campuses.
  Date: 21.05.2024 - 22.05.2024

  Compulsory education
  Location: (1x 1week) which may move online
  Date:

   

  If both are blank cours may not be running this semester.
  If compulsory education is blank cours may not have it, se curriculum for information about this.

• Tuition fee

  A semester fee is required.

  An external student is defines as a student from another Nordic coutry, or an agency outside the police service (including police special agencies). The tuition fee is not applicable to students coming from insttitutions which have a reciprocal agreement with NPUC, or an agreement involving contributions to the study programme. The student fee is NOK 25 000,-.

• Contact information

  Academic questions

  Academic inquiries should be adressed to e-mail: cybercrime@phs.no.

  Questions relating to the admissions procedure

  Questions regarding the admission process (deadline, application process, documentation) should be adressed to e-mail: opptakevu@phs.no.

  Administrative questions about the study programme

  If you do not find what you are looking for, please send an email to: studiekontoret.oslo@phs.no.

The course is one of a series of modules in the NCFI Program

• All modules

  Nordic Computer Forensic Investigators - Module 0 Introduction to Digital Policing (Digital Forensics)

  Nordic Computer Forensic Investigators - Module 1 Core Concepts in Digital Investigation and Forensics

  Nordic Computer Forensic Investigators - Module 2A Computer Forensics

  Nordic Computer Forensic Investigators - Module 2B Online Investigation

  Nordic Computer Forensic Investigators - Module 2C Network Forensics and Cybercrime

  Nordic Computer Forensic Investigators - Module 2D Mobile Extraction and Artifacts

  Nordic Computer Forensic Investigators - Module 3A Forensic Tool Development

  Nordic Computer Forensic Investigators - Module 3B Linux Forensics

  Nordic Computer Forensic Investigators - Module 3C Linux as an Investigative Platform

  Nordic Computer Forensic Investigators - Module 3D Macintosh Computer Forensics

  Nordic Computer Forensic Investigators - Module 3E Windows Forensics

  Nordic Computer Forensic Investigators - Module 3F Memory Investigation

  Nordic Computer Forensic Investigatiors - Module 3H Mobile Forensics II

  Nordic Computer Forensic Investigatiors - Module 3J Malware Investigation

  Nordic Computer Forensic Investigators - Module 3K Digital Investigation

  Nordic Computer Forensic Investigatiors - Module 3L Database Investigation and Data Mining

  Nordic Computer Forensic Investigatiors - Module 3M Forensic Tool Development II

  Nordic Computer Forensic Investigatiors - Module 3N Crypto Assets

  Nordic Computer Forensic Investigatiors - Module 3R R, Visualisation & Descriptive Statistics