Norwegian version of this page

Memory Investigation

This module will allow you to develop your skills and apply your knowledge to use software for acquisition, interpret the data and write a forensic report suitable for court proceedings.

Level:
Further education
ECTS Credits:
7.5
Organisation:
Part-time
Study Format:
Web based
Start of studies:
Fall 2025

Application prosess

The application prosess have several steps. Please familiarize yourselv with the different stages of the process.

How to apply

About the programme

Your learning outcomes

The aim of this program is to ensure that the quality of computer forensic investigation is of a high level, guaranteeing legal protection and the right to privacy.
General competence

After completion of the module candidates will be able to:

  • perform professional and research tasks in digital policing
  • see the role of digital policing in a broader perspective during an investigation

Knowledge

After completion of the module candidates will have knowledge of:

  • the potential of computer memory in investigation
  • how information is stored in computer memory and the potential traces that can be found
  • the challenges of memory acquisition and analysis

Skills

  • After completion of the module candidates will be able to:
  • acquire computer memory
  • interpret information stored in memory using forensic tools
  • compare various memory acquisition techniques
  • evaluate the relevance of memory artefacts to an investigation

Admission criteria

The primary target group is police staff in the Nordic countries whose main task is handling and investigating digital evidence. It is a prerequisite that participants are selected in accordance with local competency plans.

Employees in other International police services or governmental agencies who work, or will work, with digital evidence are also eligible to apply.

Applicants must be recommended by the employer.

Admission criteria:

  • Bachelor’s degree
  • have passed M2A Computer Forensics of 15 ECTS or M2C Network Forensics and Cybercrime of 15 ECTS

Applicants who do not satisfy the requirement for a bachelor’s degree must document the following:

  • Passed and completed 2-year education at a higher level than upper secondary school, and in addition either:
  • Minimum 60 ECTS
    • (of which NCFI Core Concepts of 15 ECTS and any NCFI M2X of 15 ECTS each. The former NCFI Module 1 (5 ECTS) and former NCFI Module 2 (25 ECTS) are also accepted.), or
  • 1680 hours of continuing education courses, or
  • 5 years of practice

Employment, work experience and additional requirements:

  • Current employment in a government agency (e.g., law enforcement agency or other cooperating governmental agencies/organisations)

All applicants have to document English language proficiency when applying for this study.

Practical information

The education is organised as an online part-time programme and must be completed within 5 months. The scope of further education is estimated to be approx. 210 hours of study.

The mandatory reading shall not exceed 450 pages.

The student needs to pass a number of course requirements in order to sit the exam. Students may have multiple attempts at these tests if necessary.

The module is concluded with an individual take-home exam over 4 hours. The exam must be passed in order to successfully complete the module.

Grading is on a scale of A – F (in which A – E are passing grades and F is a fail).

Schedule for tuition and exam

Autumn 2025

Exam:
Location: Online, take-home exam over 4 hours.
Date: 04.12.2025

Compulsory education
Location: Online
Date: 11.08.2025 (welcome meeting)

If both are blank, then the course may not be running this semester.
If compulsory education is blank, then the course may not have it, see curriculum for information about this.

Tuition fee

A semester fee is required.

An external student is defined as a student from another Nordic country, or an agency outside the police service (including police special agencies). The tuition fee is not applicable to students coming from institutions which have a reciprocal agreement with NPUC, or an agreement involving contributions to the study programme. The student fee is NOK 15 000,-.

Study plan

Current study plan (pdf)

Programme structure and courses

Contact

Academic questions

Academic inquiries should be adressed to e-mail: cybercrime@phs.no.

Questions about admission

For questions regarding the application prosess, admission requirements and the admission prosess, contact: opptakevu@phs.no