Bachelor in Digital Forensics

Education focusing on determining the who, what, where and when through the investigation of constantly changing, and increasingly complex digital environments. The program prepares you for a career within digital security and forensics for law enforcement and other organizations in need of digital security.

Working in Digital Forensics and Incident Response

Digital forensics has evolved from its traditional law enforcement focus of search and seizure, to a more dynamic approach; driven by changes to technology, how technology is used and evidence that can be recovered. Technology is no longer a simple computer, it is now interconnected, embedded in human bodies, and relied upon by all business and industries – often hosted in the “cloud”. No action can now be taken in real-life that does not involve a digital device.

This reliance on digital technology now means that all digital devices potentially hold the significant piece of a puzzle needed during an investigation by law enforcement, government bodies, and organisations, to determine what has happened. Alongside the technological changes there is also a significant shift towards cyber-attacks, which includes ransomware, malware and “hacking”.

It is a field with good job opportunities both now and in the future. Christoffer Hansen Michaelsen, student
There is always something to learn, and incredibly diverse job opportunities. Håkon Smalås, student

This three-year bachelor program focuses on the analysis of digital devices through the development of digital forensics and incident response competencies. Students will be experienced in the lifecycle of securing and analysing evidence from digital crime scenes from the perspective of a range of situations and needs.

The program is delivered using a mixture of practical and theoretical, which together provide overall knowledge about the analysis and inner workings of digital systems, and how to extract the key forensic artifacts from these. Upon graduation, a student will be competent to enter a number of different roles involved in the protection and analysis of digital systems.

Program Structure

During the first year of the program students will focus on the development of the core technical fundamentals that will allow them to succeed in the future specialist courses. The first year is designed to develop students to the correct level for progressing into later years. During this period, students will develop basic research skills along with the ability to verify that information.

The second year of studies is more in depth. Students will explore the core concepts of digital forensics looking at securing and analysing digital devices including data recovery, file reconstruction and determining the what and when of an investigation. By obtaining this information, we can look at the user´s behaviour, vital timestamps and other information that can be recovered. We utilise cases and draw upon the industry experience of the digital forensic team to deliver real-life examples and war stores.

The final year of the Bachelor program provides additional specialism in advanced areas of the subject area; allowing students to encounter, both theoretically and practically, technology and techniques that they will face now and in the future. The final project explores new systems and applications. It is meant to make the student an informed and knowledgeable investigator in digital forensics and incident response; providing an opportunity to research into an area that they find most exciting with the support of experienced academics.

Year 1:

  • Problem Based Learning and Research Methodologies
  • Introduction to Information Security
  • Professional Aspects of Computing
  • Introduction to Programming
  • Discrete Mathematics
  • Network Principles
  • Programming and Databases
  • Studio 1

Year 2:

  • Digital Forensics Practice and Procedure
  • Operating Systems
  • File System Analysis
  • Network Security
  • Digital Investigation
  • Studio 2

Year 3:

  • Security and Law
  • Elective
  • Elective
  • Elective
  • Elective
  • Advanced Device Forensics
  • Bachelor Project

Sample of electives:

  • Cryptography and Steganography
  • Incident Management
  • Data Recovery
  • Ethical Hacking
  • Risk Analysis
  • Honey Pots


  • To demonstrate knowledge of procedures and standards
  • To demonstrate an in-depth knowledge of Information Security and the students chosen specialisation
  • To be efficient, innovative, inquisitive security professionals
  • To understand what constitutes a security professional


  • Interviewing skills and the ability to extract information
  • Apply a range of problem solving and investigating techniques, and to be able to interpret the solutions appropriately
  • Demonstrate at a practical level how to conduct forensic examinations of computer systems
  • Appropriate handling techniques for digital evidence
  • To be able to demonstrate excellent abstract analytical methods
  • To have awareness of the greater implications of their decisions and actions

General Competence:

  • Understand the importance of team-based, collaborative work
  • Is socially and ethically appropriate and contextually sensitive
  • Understand the skills required to be a security professional
  • To understand the computing professional’s legal and ethical responsibilities
  • To demonstrate good written & oral communication
  • To possess good project management skills
  • Apply a range of investigating and communication techniques, and to be able to appropriately interpret the solutions and communicate findings
  • To demonstrate skills as a reflective practitioner, with the ability to critically reflect on practice in order to develop professional skills

PC requirements for students: 2021 August intake

Students must have access to a stable network connection that is at a minimum 4mbit speed (10Mbit or greater recommended). This is used extensively for required streaming of videos and downloading large files for lectures and tutorials.

Campus based students will have access to suitable PC’s and networking whilst on campus, but it is recommended to have their own computer to facilitate working off campus. Campus students are required to have a good quality set of headphones or headset of their own that can be used in the lab.

The minimum requirements below apply to all online students, and campus students who are going to purchase/use their own machine.  This may not be an Apple Mac System.


  • CPU: Intel i5 (5th Generation or later - or AMD equivalent)
    • Apple M1 CPU s are not suitable as the required software will not run.
  • RAM: 8GB (16GB recommended)
  • Storage: 500GB
  • USB Drive: 8-16 GB (2-3 suggested)
    • Forensics students may benefit from a small 1-4GB USB Drive in addition for some tutorials.
  • Operating System:
    • VMware Workstation is used for teaching and is available once registered at Noroff.
    • There are many Linux distributions available. Ubuntu Version 20.04 LTS is recommended and supported in tutorials.
    • Microsoft Windows 10 or Linux (Ubuntu is supported) with an option to dual boot or launch alternative operating systems in a Virtual Machine.
    • Many students find that the use of Windows is a good starting point to allow them to develop the skills to configure alternative operating systems.
    • Several tutorials will require access to a Windows operating system (either as a host or as a virtual machine)
    • Full administrative privileges to install and manipulate all aspects of the system.
  • Monitors: Dual monitors or a single wide screen with equivalent display size are recommended - for ease of use for working concurrently with documents and applications.
  • Web camera & Microphone
    • Students are expected to interact with staff and peers via video and voice calls.
    • A good quality headset (headphones + microphone) is recommended.

Additional RAM and hard disk storage (1TB) and/or an upgrade to SSD/NVMe drives are recommended for better performance.

Apple Mac systems are not suitable for Digital Forensics.

Job Opportunities

The expertise and skills of this bachelor program are sought after in the public, police and intelligence, and industrial organizations. The huge growth in digital technology creates real threats for both businesses and government critical infrastructures. Most large businesses that rely on digital technology, have the need for people with expertise in digital forensics. This bachelor's degree provides a unique qualification for handling challenges in a variety of organizations.

The degree prepares you to work with security implementation. You will be able to examine data offenses and digital fraud. You can act as an expert witness in court cases and lawsuits. You will also be able to critically assess and mitigate threats to digital infrastructures.

With a Bachelor's Degree in Digital Forensics, you can apply for positions as information security manager, information officer, computer crime investigator, and / or eDiscovery investigator.

Further Studies

Students who wish for further training in digital forensics can apply for studies related to computing and information security at the master level and then at the doctoral level by Norwegian or international universities.

Watch recording of livestream

We recommend watching the latest livestream on our IT bachelor programs hosted by Emlyn Butterfield and recorded 10 March 2023. You can also skip directly to the chapter regarding Digital Forensics in the chapter menu, which starts at 10:51.


Apply now

Course information

Next startup:

August 14, 2023.
Read more about semester start.

Locations: Kristiansand,
Online and
Online PLUS Oslo
Duration: 3 years
Price Online:

EUR 4.900,- per semester.
EUR 190,- admission fee.

Price Online PLUS Oslo:

EUR 5.700,- per semester.
EUR 190,- admission fee.

Price Campus Kristiansand:

EUR 6.100,- per semester.
EUR 190,- admission fee.

Admission requirements: Three-year upper secondary education. You may also apply for admission by prior learning.
In addition there is a special requirement of Math R1, or S1 and S2, or international equivalent. Other documented knowledge or education can be accepted as equivalent. Read more.
Approvals: Approved for loans and grants from the State Educational Loan Fund. Accredited by NOKUT.
Degree: Bachelor
Credits: 180 ECTS

Lecturing staff

Dr. Isah A. Lawal

Dr. Isah A. Lawal

Associate Professor
Dr. Rayne Reid

Dr. Rayne Reid

Associate professor

Prof. Fabricio Bortoluzzi

Assistant professor
Piet Delport

Piet Delport

Assistant Professor
Ruan Koen

Ruan Koen

Assistant Professor
Emlyn Butterfield

Emlyn Butterfield

Associate Professor
Veronica Schmitt

Veronica Schmitt

Associate Professor
Tom Drange

Tom Drange

Konstantin Lenchik

Konstantin Lenchik

Tutor and teacher
Mariya Chirchenkova

Mariya Chirchenkova

Tutor and teacher

Related news