Norwegian version of this page

Network Forensics and Cybercrime

Our Network Forensics & Cybercrime study will introduce you to basic principles and fundamental aspects of computer networks. You will explore how cybercrime attacks are conducted using networks and gain the knowledge and practical skills to conduct the everyday tasks of a network forensics investigator including analysing communication artefacts, and network log files as well as designing, configuring and managing network infrastructure.

Level:
Further education
ECTS Credits:
15
Organisation:
Part-time
Study Format:
Web based
Start of studies:
Fall 2025

Application prosess

The application prosess have several steps. Please familiarize yourselv with the different stages of the process.

How to apply

About the programme

Your learning outcomes

The aim of this program is to ensure that the quality of network forensic investigation is of a high level, guaranteeing legal protection and the right to privacy.
General competence

After completion of the module candidates will:

  • Perform professional and research tasks in digital policing
  • see the role of digital policing in a broader perspective during an investigation
  • Knowledge

After completion of the module candidates will have knowledge about:

  • types of cybercrime and their effect on society
  • known modus operandi of cybercriminals
  • how networks function
  • various network protocols
  • future cybercrime challenges for law enforcement

Skills

After completion of the module candidates will be able to:

  • Intercept and analyse network traffic
  • design and configure network infrastructure
  • analyse network artefacts
  • conduct network forensics as part of a cybercrime investigation
  • apply relevant methodologies in all forensic analysis tasks
  • communicate technical findings

Admission criteria

The primary target group is police staff in the Nordic countries whose main task is, or will be, handling and investigating digital evidence.

Employees in other International police services or governmental agencies who work, or will work, with digital evidence are also eligible to apply.

Applicants must be recommended by the employer.

Applicants are required to provide the following documentation:

  • Higher Education Entrance Qualification
  • Completion of the M1 Core Concepts in Digital Investigation & Forensics, 15 ECTS
  • Current employment in a governmental agency

Applicants who do not have the higher education entrance qualification have to provide:

  • A minimum of 5 years relevant work experience, of which maximum 2 years can be relevant education, replace the requirements for Higher Education Entrance Qualification.
  • Meet the English proficiency requirements

This arrangement only applies to applicants over the age of 25.

All applicants have to document English language proficiency when applying for this study.

Practical information

The education is organised as an online part-time programme and must be completed within 5 months. The scope of further education is estimated to be approx. 420 hours of study.

The mandatory reading shall not exceed 975 pages.

The teaching and learning activities also include optional live online lectures throughout the semester (totalling no more than 16 hours).

The student needs to pass a number of course requirements in order to sit the exam.

The module is concluded with a 6 hour take-home-exam. Students will be graded on a scale from A – F. A – E are passing grades and F is a failing grade.

Schedule for tuition and exam

Autumn 2025

Exam:
Location: Online, take-home exam over 6 hours.
Date: 09.12.2025

Compulsory education
Location: Online
Date: 13.08.2025 (Welcome meeting)(Date amended)

If both are blank, then the course may not be running this semester.
If compulsory education is blank, then the course may not have it, see curriculum for information about this.

Tuition fee

A semester fee is required.

An external student is defined as a student from another Nordic country, or an agency outside the police service (including police special agencies). The tuition fee is not applicable to students coming from institutions which have a reciprocal agreement with NPUC, or an agreement involving contributions to the study programme. The student fee is NOK 25 000,-.

Study plan

Current study plan (pdf)

Programme structure and courses

Contact

Academic questions

Academic inquiries should be adressed to e-mail: cybercrime@phs.no.

Questions about admission

For questions regarding the application prosess, admission requirements and the admission prosess, contact: opptakevu@phs.no