Norwegian version of this page

Computer Forensics

The aim of this study is to introduce you to the basic principles of operating systems and file system concepts to develop your knowledge of the underlying architecture and operation of Windows-based systems.

Level:
Further education
ECTS Credits:
15
Organisation:
Part-time
Study Format:
Web based
Start of studies:
Spring 2027
Application deadline:
September 15th

Application prosess

The application prosess have several steps. Please familiarize yourselv with the different stages of the process.

How to apply

About the programme

Your learning outcomes

The aim of this program is to ensure that the quality of computer forensic investigation is of a high level, guaranteeing legal protection and the right to privacy.

General competence

After completion of the module candidates will:

  • perform professional and research tasks in digital policing
  • see the role of digital policing in a broader perspective during an investigation

Knowledge

After completion of the module candidates will have knowledge about:

  • Windows file and operating systems
  • locations of various forensic artefacts
  • disk partitioning schemes
  • challenges of digital forensics
  • validation of forensic tools

Skills

After completion of the module candidates will be able to:

  • manually interpret various partitioning schemes
  • analyse Windows file systems
  • analyse various Windows artefacts
  • apply relevant methodologies in all forensic analysis tasks
  • automate simple forensic tasks
  • communicate technical findings

Admission criteria

The primary target group is police staff in the Nordic countries whose main task is, or will be, handling and investigating digital evidence.

Employees in other International police services or governmental agencies who work, or will work, with digital evidence are also eligible to apply. 

Applicants must be recommended by the employer.

Applicants are required to provide the following documentation:

  • Higher Education Entrance Qualification
  • Completion of the M1 Core Concepts in Digital Investigation & Forensics, 15 ECTS
  • Current employment in a governmental agency

Applicants who do not have the higher education entrance qualification have to provide:

  • A minimum of 5 years relevant work experience, of which maximum 2 years can be relevant education, replace the requirements for Higher Education Entrance Qualification.
  • Meet the English proficiency requirements

This arrangement only applies to applicants over the age of 25. 

Practical information

The education is organised as an online part-time programme and must be completed within 5 months. The scope of further education is estimated to be approx. 420 hours of study.

This education includes a single week campus held online using appropriate video conferencing tools. The campus amounts to approximately 40 hours of study. Attendance is mandatory, and there is a requirement of 100% participation at this gathering.

The mandatory reading shall not exceed 975 pages.

Teaching and learning activities also include optional live online lectures throughout the semester (totalling no more than 16 hours).

The student needs to pass a number of course requirements in order to sit the exam.

The module is concluded with a 6 hour take-home exam. Students will be graded on a scale from A – F. A – E are passing grades and F is a failing grade.

Schedule for tuition and exam

 

Autumn 2026

Welcome Meeting (online): 10.08.2026 (10:00-11:00 CEST)

Online Campus Week: Week to be confirmed; this event will consist of a week-long campus held online all day Monday to Friday inclusive. 12.10.2026-16.10.2026

Exam Preparation Review Session (online): Date and time to be confirmed at the start of the study.

Exam: Home exam 04.12.2026 (09:00-15:00 CET)

 

Spring 2027
Compulsory education
Location: Online
Welcome meeting: 05.01.2027 11:00-12:00 CET 

Online Campus Week: 15.03.2027 - 19.03.2027 08:00-17:00 CET 

Exam Preparation Meeting: 28.04.2029 15:00-16:00 CEST

Additional optional Q&A Sessions and Walkthroughs to be announced in the course progression.

Exam:
Location: Online, take-home exam over 6 hours
Date: 13.05.2027 09:00-15:00

 

If both are blank, then course may not be running this semester.
If compulsory education is blank, then the course may not have it, see curriculum for information about this.

 

Tuition fee

A semester fee is required.

An external student is defined as a student from another Nordic country, or an agency outside the police service (including police special agencies). The tuition fee is not applicable to students coming from institutions which have a reciprocal agreement with NPUC, or an agreement involving contributions to the study programme. The student fee is NOK 25 000,-.

Study plan

Current study plan (pdf)

Programme structure and courses

Contact

Academic questions

Academic inquiries should be adressed to e-mail: cybercrime@phs.no

Questions about admission

For questions regarding the application prosess, admission requirements and the admission prosess, contact: opptakevu@phs.no