The digital transformation of society is affecting crime, criminals and criminal investigation. The Digital Forensics & Cyber Investigation continuing education program at BFH was created to address new education demands for skilled digital forensic and cyber investigators. The CAS Digital Forensics & Cyber Investigation Advanced provides you with extensive technical digital forensic knowledge and skills to perform analysis of file systems, operating systems, applications, and computer memory.
teaches advanced storage and file system forensics, operating system artefact analysis, application and media file artifact analysis and memory forensics,
consists of 4 residential one-week block (modules),
is taught in English by internationally recognized experts in the field.
Certificate of Advanced Studies (CAS)
Week 43 to week 14
4 residential one-week block
One month before the start of the semester
You can attend the one-week blocks of the CAS Digital Forensics & Cyber Investigation and CAS Digital Forensics & Cyber Investigation Advanced standalone course.
You can attend the following modules:
Digital Forensics Fundamentals
Cyber Investigation Fundamentals
Digital Forensics Acquisition
File System Analysis
Operating System Artifact Analysis
Application and Media File Artifact Analysis
You can register using the form below. We will contact you and send you further information.
Unfortunately, the form cannot be displayed with the Opera browser. Certain browser settings of Mozzilla Firefox can also cause problems. If this is the case, please use Google Chrome, Microsoft Edge, Safari or Internet Explorer.
Structure + Content
The digital transformation of society is affecting crime, criminals and criminal investigation. New cyber criminal methods using advanced technical tools and exploitation are an opportunity for criminals and a challenge for investigators. Technically complex illegal activities are being sold as services to less skilled criminals, increasing the challenge of fighting cybercrime. On the other hand, criminals face challenges trying to hide and avoid attribution. The large amount of digital traces stored across multiple locations creates an opportunity for criminal investigators.
Crime scenes are also changing. With the growth of cybercrime, crime scenes are becoming virtual, global, and multi-jurisdictional. Investigating a trans-national cyber crime scene requires investigative tools to remotely gather information, and also collaboration between entities in both the public and private sectors.
Modern physical crime scenes have a comprehensive set of digital evidence sources. In addition to PCs and notebooks, digital evidence traces can be found in mobiles, IoT devices, automobiles, smart control systems, data stored with cloud providers, and distributed on servers across the Internet. With the increase in digital and online payment systems, financial transactions are also becoming an important digital evidence source, especially in financially motivated crimes.
Objectives + Skills
This continuing education program practical learning objectives. Students completing the CAS Digital Forensics & Cyber Investigation Advanced will understand the fundamental concepts of modern digital forensics. They will have the skills to collect and analyze digital evidence from a variety of sources and have the ability to conduct basic cyber investigations.
This will prepare students for career opportunities in a variety of organizations:
Law enforcement - Federal agencies, KAPOs
Military and government - CERTs, cyber-troops
Finance industry - fraud/cybercrime investigation teams
Insurance industry - cyber insurance claims investigation
Large enterprises - security and incident response teams
Consultancy and audit - e-Discovery, accounting, «Big Four»
IT security service providers and product vendors
Private boutique digital forensic and investigation firms
A university degree and practical experience are usually required. People with a high vocational training can apply provided they have sufficient professional experience and prior scientific and methodological knowledge.