Master Digital Forensics (part-time)

The Master of Digital Forensics is specifically tailored to professionals who would like to:

• Advance their technical skills in modern day digital forensics and investigations.
• Acquire the necessary management and communication skills required to perform forensic investigations.
• Be prepared for the technology paradigm shift towards IOT forensics.
• Learn how to use analytics, AI, and ML methodologies and apply forensic frameworks to control huge investigations.
• Learn to develop state of the art forensic tools.

The Master Digital Forensics program has an average study load of 16–20 hours per week. This includes one dedicated day per week for on-campus lectures and guidance. The program is offered in a hybrid format, providing the option to attend lectures online. Please note that there are mandatory in-person attendance days, for example at the start of the semester and during exams.

The master's program is based at our location in The Hague at the HSD-Campus, where our Digital Forensics Lab is also located. For first-year students in 2026–2027, the dedicated class day will be Tuesday.

The curriculum combines theory and practice. Participants are expected to complete practical projects and assignments either within their own workplace or at the Digital Forensics Lab of the Digital Forensics & E-Discovery research group.

The Digital Forensics & E-Discovery lectorate has opened a laboratory on the campus of The Hague Security Delta (HSD) for digital forensic research with a focus on the Internet of Things (IoT). The Digital Forensics Lab has specialized equipment, knowledge and (digital forensics) software. You will be able to can use this environment for research and carrying out practical assignments.

You will also have access to the facilities of Leiden University of Applied Sciences when enrolled in the Master’s programme. For example, you will have access to an extensive selection of professional literature and research results via the digital learning environment, including from the Leiden Centre for Applied Bioscience (LCAB) and the research group Digital Forensics & E-Discovery. You can also contact the Media Centre for additional professional literature and free access to various databases.

Digital Forensic Principles

This course provides a solid basis for developing the fundamentals of Digital Forensics. The course is a mix of investigation methodologies, basic forensic skills and technology. In addition to theory and assignments, this module also encompasses practical components.

Computer Forensics

This course focuses on digital forensic artifacts that can be found on computers. In this course the principles of computers and their operating systems will be covered. With this knowledge you will research various artifacts, the influence of the environment on these artifacts and even anti-forensics. You will research traces which can be left behind by applications, virtual computing, and/or cloud storage. You learn to apply various digital forensic processes and techniques, for identifying, acquiring, analysing, and reporting various traces.

Research Methodology

Every day, forensic research plays a pivotal role in gathering crucial evidence to be presented in the courtroom. Because this evidence serves as the key to unraveling the truth and ensuring justice prevails, scientific research skills are essential for every forensic investigator.

In the module Research methodology you will learn the essential research skills. This means that you will develop the expertise to design a research project and to transform your ideas into a well-structured research proposal. You'll receive guidance throughout your research project and engage in thoughtful discussions about the steps and decisions made along the way. Also, you will learn to critically assess the sources you rely on. By the end of the module, you can systematically design and execute scientifically sound research projects and effectively communicate your findings to various audiences.

Law, Ethics & Governance

When the expertise of a digital forensics expert is called upon digital skills are a necessary requirement. They are however not sufficient. All digital forensic work exists in a context that needs to be understood in order to work effectively. In this module you will gain a basic understanding of the legal and ethical context of digital forensic work and how it is influenced by that context.

This module will require you not only to consider the most efficient way to go about your work from a technical perspective, but also look at legal and ethical consequences of the choices you make.

Data Analytics

In this comprehensive module, you'll embark on a journey into the world of data analysis, where you will acquire essential skills for handling data in forensic scenarios. Our course takes you through the fundamental elements of data analysis, from data collection to visualization, and demonstrates how these skills can be applied effectively in forensic contexts.

By the end of this module, you will have not only acquired the essential knowledge and skills to work in a data analysis team, but also you have completed a small data project to showcase your practical experience. Join us today and unlock the potential of data analysis in the world of forensic applications.

Mobile Forensics

Mobile forensics is a subgroup within digital forensic investigation that deals with collecting, analyzing and reporting evidence from mobile devices such as smartphones, tablets and smartwatches. As people rely on mobile devices for most of their data usage, these devices contain a large amount of evidence that can be useful in investigations.

Mobile devices can provide a wide range of useful data, from call logs and web search history to location data and physical user activity showing where the owner of the device was at a given time and doing. This module looks at the file systems and operating systems used by mobile devices, and how to extract digital evidence from them. It also looks at techniques to analyse, interpret, and validate such data when the meaning of data is not clear.

Practical Laboratory Project

In the practical Laboratory Project you will learn to design and build a complex IT system in a laboratory setup. You will perform experiments on this set up, doing digital forensic research. At the end you write a short scientific research paper about your research results.

Network and IOT Forensics

This course examines digital forensic techniques in the context of networks and the internet (b.e. Internet of Things). You will learn about the identification of artifacts and collecting and analysing evidence using appropriate technologies. At the end of the course you will be able to advise about the acquisition and use of this information.

AI Forensics

The advances in AI are unstoppable. Not only in the area of machine learning and computer vision, but maybe even more so, in the field of language models and embedding AI in more or less every digital application and device. This generates new possibilities and challenges for digital forensics. In this module, you will focus on the impact of AI on the forensic field and explore tools and methodologies that help you deal with it effectively.

Master Thesis

The purpose of the master thesis is to introduce and describe the results of a research project conducted on a topic of your choice related to Digital Forensics or E-Discovery. It should be written according to academic standards consistent with the relevant international literature in the field. The thesis is written in English and should provide clear evidence that you are familiar with the current scientific literature on the chosen topic, and can relate the research to existing work.

The programme is offered in two formats:

• Full-time (1 year)
• Part-time (2 years) 

The full-time programme is designed for students who can dedicate most of their time to study, with classes held at least three days per week and completion possible within one academic year. It is ideal for students who can fully commit to their studies, including recent graduates seeking to deepen their expertise in digital forensics.

The part-time programme, on the other hand, is tailored for professionals already working in the field of digital forensics or cybersecurity who wish to advance their careers while continuing to work. Students attend classes one day per week, combining work with study, and can complete the programme over two years. A suitable forensic-related job is a requirement for admission.

Yes, a suitable workplace in the field of digital forensics is needed to start with the Master’s programme.

The Master Digital Forensics programme is currently offered by Leiden University of Applied Sciences (Hogeschool Leiden), with classes held at the HSD Campus (The Hague Security Delta) in The Hague, giving access to a state-of-the-art Digital Forensics Lab.

HSD-campus: Wilhelmina van Pruisenweg 104, 2595 AN Den Haag.

The programme starts every year in September. Mid-year entry is not possible.

The deadline to enrol for the full-time masters programme Digital Forensics is 15 August 2026. Please note that the enrolment deadline for international students is 1 May 2026. Early enrolment is strongly recommended to allow sufficient time to complete the intake process and resolve any admission requirements (e.g. deficiencies).  Please visit the Requirements and enrolment page for more information.

 Statutory tuition fee:
(EU/EEA students/ first enrollment in a Dutch master’s degree program)

• Full-time & part-time: € 2.695 per year (academic year 2026–2027)

Institutional tuition fee:
(non-EU/EEA students/ second master's degree)

• Full-time: € 9,556 per year (academic year 2026–2027)
• part-time: 6.689,- per year (academic year 2026–2027)

In addition, you may need to budget for study materials, books, and possibly a suitable laptop. If you are required to take pre-master’s modules, those have additional costs per module.

The programme is fully English-taught (both full-time and part-time), because the digital forensics field is international and relies heavily on English-language literature, tools, and collaboration.

Download the EER of the Master Digital Forensics.