Memory Forensics

This module provides an introduction to memory forensic acquisition and analysis techniques.

Topics and content

  • Dumping/acquiring memory images
  • Using Volatility and other tools to analyze memory
  • Memory introspection of running processes
  • Established network connections, listening sockets
  • Finding cryptographic keys and passwords
  • Extracting file fragments with carving memory data
  • Analyzing hibernation, swap, and page files
  • Analyzing OS generated core/crash dumps

Factsheet

  • Degree/Certificate The course offers you the possibility to pass a final exam that earns you 3 ECTS, or 40 CPE (continuing professional education) credits, for subsequent CAS or MAS degrees in Digital Forensics & Cyber Investigation.
  • Duration 5 days
  • Schedule 17.–21.03.2025
    08.30–16.30
  • Application deadline Up to 10 days before the start of the course
  • ECTS credits Can be credited towards the CAS DFCI
  • Costs CHF 2'500
  • Teaching language English
  • Location Biel, Aarbergstrasse 46
    Remote course
  • School School of Engineering and Computer Science
  • Next session 17.–21.03.2025

Contact

Registration

Target audience

The DFCI program is designed for two groups of professionals:

  • Experienced forensic investigators who want to increase their technical skills in digital forensics and cyber investigations.
  • Experienced engineers and technicians who want to transition into the field of digital forensics and cyber investigations.

Skills

The DFCI program will prepare students for career opportunities in a variety of organizations:

  • Law enforcement – Federal agencies, KAPOs
  • Military and government – CERTs, cyber-troops
  • Finance industry – fraud/cybercrime investigation teams
  • Insurance industry – cyber insurance claims investigation
  • Large enterprises – security and incident response teams
  • Consultancy and audit – e-Discovery, accounting, «Big Four»
  • IT security service providers and product vendors
  • Private boutique digital forensic and investigation firms

Entrance Requirements

Degree from a university or higher professional education (HF, federal diploma).  Professional experience in the field of cyber security / forensics.

Implementation Provisions

DFCI courses

The Digital Forensics & Cyber Investigation (DFCI) professional courses offer a choice of Digital Forensics and Cyber Investigation modules. They are held as one-week full-time intensive courses, making it easier to attend and faster to complete. The courses are taught in English by internationally recognised experts in the field.

Location

Classes are held at Aarbergstrasse 46 in the new building of the Switzerland Innovation Park Biel/Bienne (SIPBB), which is withing easy reach of Biel/Bienne railway station.

A location with many advantages

  • Classrooms within two minutes walking distance from Biel/Bienne railway station
  • Ideal train connections from Bern’s main railway station (every 15 minutes) and from Bern Wankdorf (every 30 minutes)
  • State-of-the-art infrastructure in the new SIPBB building
  • Various catering options in the immediate vicinity
  • Innovation and networking events

And that’s not all! Biel/Bienne is…

  • an innovation hotspot,
  • a university city,
  • an industrial and service city with numerous major players in the watchmaking, mechanical engineering, precision engineering and medical technology industries and major representatives of the communications and telecommunications sectors,
  • bordered by Lake Biel and its wide range of sports and leisure facilities,
  • a city that embodies bilingualism,
  • a town with a vibrant cultural life.

Biel Aarbergstrasse 46 (Switzerland Innovation Park Biel/Bienne)

Biel, Aarbergstrasse 46

Bern University of Applied Sciences

Engineering and Computer Science
Switzerland Innovation Park Biel/Bienne
Aarbergstrasse 46
CH 2503 Biel