Our digitally transformed world creates many new opportunities for misconduct. Criminals are rapidly shifting their field of activity to the digital domain providing a growing need for trained forensic IT specialists who can act quickly and effectively in digital forensic investigations.
Mobile forensics is a subgroup within digital forensic investigation that deals with collecting, analyzing and reporting evidence from mobile devices such as smartphones, tablets and smartwatches. Mobile devices can provide a wide range of useful data, from call logs and web search history to location data and physical user activity showing where the owner of the device was at a given time and doing.
Something for you?
You are a professional with a Bachelor’s or Master’s degree working in the digital forensic field looking to develop or improve your research skills.
About the Course
This module delves into the file systems and operating systems used by mobile devices, as well as the methods for extracting digital evidence from them. It also explores techniques to access such data when security mechanisms prevent straightforward retrieval.
The Mobile Forensics course is part of the Master Digital Forensics, a two-year part-time program. The course has a study load of approximately 140 hours (5 ECTS). Our education is offered in a hybrid format, providing the option to follow lectures online except for several mandatory on-campus meetings for practical projects and exams. The curriculum combines theory and practice. Participants are expected to carry out practical projects and assignments in their own workplace or at the Digital Forensics Lab at the Digital Forensics & E-Discovery lectorate based at the HSD-campus in the Hague.
Topics
The following topics are covered during the Mobile Forensics course:
- Introduction and principles of mobile forensic investigations
- Evidence collecting and acquisition methods
- Mobile device file systems and external storage
- Basics of the iOS and Android operating systems
- Common file formats and decoding of data from mobile devices
- Digital forensic artifacts on iOS and Android devices
- Advanced app analysis techniques
- Analysis of third-party application files
- Analysis and validation of traces on physical user activity
- Practical assignment using a demo case to apply acquired knowledge and develop analysis skills.
Admission requirements
The admission requirements for this module are:
- Bachelor's degree ICT, Computer Science or Digital Forensics (or completed pre-master program Digital Forensics).
- Relevant work experience in the Digital Forensics field.
- Proficiency in academic English is required.
- Resume check to review if you meet the entry-level requirements of the module (if needed to determine this, you will be invited for an introductory interview).
Microcredential
After completing the course, you will receive a micro-credential. Micro-credentials focus on specific skills and areas of knowledge, offering a targeted, flexible, and time-efficient way to develop new competencies or enhance existing ones.
If you later decide to pursue the Master’s Degree in Digital Forensics, you will be granted exemptions for any courses in the program that correspond to the micro-credentials you have already earned.
About the Master Digital Forensics
The Master of Digital Forensics is specifically tailored to professionals who would like to:
- advance their technical skills in modern day digital forensics and investigations.
- acquire the necessary management and communication skills required to perform forensic investigations.
- be prepared for the technology paradigm shift towards IOT forensics.
- learn how to use analytics, AI, and ML methodologies and apply forensic frameworks to control huge investigations.
- learn to develop state of the art forensic tools.
Read more about the complete master’s program
Purely practical
Duration and location
Duration
12 weeks
On-campus day for study year 2025-2026
Monday
Extent
5 ECTS (140 hrs)
- Combination of self-study, on-campus lectures & practical assignments.
- Option to follow lectures online with the exception of several mandatory on-campus meetings.
Location
HSD-Campus, the Hague
Costs and planning
Cost per module
€ 2.000,- VAT exempt (excl. literature)
Start
December 2025
Registration
Register at latest by November 31, 2025
*Course will only be confirmed when there is sufficient participation.
Made your choice?
We're looking forward to seeing you! The course starts in December 2025.
Still in doubt?
We're happy to help!
Do you have any questions about this course? We're happy to help.
Haven't found what you're looking for?
Maybe this is what you seek!
Master Digital Forensics (part-time)
English programme
Lees meerover Master Digital Forensics (part-time)
Terms and Conditions
All modules are subject to the terms and conditions of Leiden University of Applied Sciences (in Dutch).