Memory Forensics

This module provides an introduction to memory forensic acquisition and analysis techniques.

Topics and content

  • Dumping/acquiring memory images
  • Using Volatility and other tools to analyze memory
  • Memory introspection of running processes
  • Established network connections, listening sockets
  • Finding cryptographic keys and passwords
  • Extracting file fragments with carving memory data
  • Analyzing hibernation, swap, and page files
  • Analyzing OS generated core/crash dumps
Degree programme in English

Factsheet

  • Degree/Certificate The course offers you the possibility to pass a final exam that earns you 3 ECTS, or 40 CPE (continuing professional education) credits, for subsequent CAS or MAS degrees in Digital Forensics & Cyber Investigation.
  • Duration 5 days
  • Schedule 17.–21.03.2025
    08.30–16.30
  • Application deadline Up to 10 days before the start of the course
  • ECTS credits Can be credited towards the CAS DFCI
  • Costs CHF 2'500
  • Teaching language English
  • Location Biel, Aarbergstrasse 46
    Remote course
  • School School of Engineering and Computer Science
  • Next session 17.–21.03.2025

Contact

Registration

Target audience

The DFCI program is designed for two groups of professionals:

  • Experienced forensic investigators who want to increase their technical skills in digital forensics and cyber investigations.
  • Experienced engineers and technicians who want to transition into the field of digital forensics and cyber investigations.

Skills

The DFCI program will prepare students for career opportunities in a variety of organizations:

  • Law enforcement – Federal agencies, KAPOs
  • Military and government – CERTs, cyber-troops
  • Finance industry – fraud/cybercrime investigation teams
  • Insurance industry – cyber insurance claims investigation
  • Large enterprises – security and incident response teams
  • Consultancy and audit – e-Discovery, accounting, «Big Four»
  • IT security service providers and product vendors
  • Private boutique digital forensic and investigation firms

Entrance Requirements

Degree from a university or higher professional education (HF, federal diploma).  Professional experience in the field of cyber security / forensics.

Implementation Provisions

DFCI courses

The Digital Forensics & Cyber Investigation (DFCI) professional courses offer a choice of Digital Forensics and Cyber Investigation modules. They are held as one-week full-time intensive courses, making it easier to attend and faster to complete. The courses are taught in English by internationally recognised experts in the field.

Location

Switzerland Innovation Park Biel/Bienne (SIPBB)

A location with many advantages

  • Classrooms within two minutes walking distance from Biel/Bienne railway station
  • Ideal train connections from Bern’s main railway station (every 15 minutes) and from Bern Wankdorf (every 30 minutes)
  • State-of-the-art infrastructure in the new SIPBB building
  • Various catering options in the immediate vicinity
  • Innovation and networking events

And that’s not all! Biel/Bienne is…

  • an innovation hotspot,
  • a university city,
  • an industrial and service city with numerous major players in the watchmaking, mechanical engineering, precision engineering and medical technology industries and major representatives of the communications and telecommunications sectors,
  • bordered by Lake Biel and its wide range of sports and leisure facilities,
  • a city that embodies bilingualism,
  • a town with a vibrant cultural life.

Biel Aarbergstrasse 46 (Switzerland Innovation Park Biel/Bienne)

Biel, Aarbergstrasse 46

Bern University of Applied Sciences

Engineering and Computer Science
Switzerland Innovation Park Biel/Bienne
Aarbergstrasse 46
CH 2503 Biel

Bern University of Applied Sciences

Engineering and Computer Science
Switzerland Innovation Park Biel/Bienne
Aarbergstrasse 46
CH 2503 Biel