Develop the cutting-edge skills and knowledge you need to become a digital forensics expert.

The Master of Science in digital forensics and cyber investigation at University of Maryland Global Campus is designed to prepare you to meet the growing demand for investigative, leadership, and executive skill in evaluating and managing complex cybersecurity incidents and threats. Learn how to determine whether a digital system has been attacked or compromised, and master reliable methods to identify, preserve, analyze, and present evidence for legal prosecution, administrative proceedings, and business purposes.

In this program, you can develop investigative problem-solving skills, contribute to important team deliverables, analyze complex data scenarios, examine digital media for evidentiary artifacts, and write detailed digital forensic examination reports. The applied knowledge and skills you acquire can help government, business, and law enforcement organizations in detecting data breaches, mitigating cyber attacks, identifying responsible parties, and evaluating evidence of digital crime.

These program requirements are for students who enroll in the 2019–2020 academic year. For prior year academic requirements, visit the catalog archive in the Current Students section.

About the Digital Forensics and Cyber Investigation Master's Degree

Coursework in the digital forensics and cyber investigation master's degree can help you gain the technical competencies and knowledge needed to investigate system security breaches and recover lost or compromised data. Our curriculum features hands-on learning experiences that use the same evidence and scenarios encountered in real-world investigations.

What You'll Learn

Through your coursework, you will learn how to

  • Design procedures at a suspected crime scene to ensure that the digital evidence obtained is not corrupted
  • Conduct hands-on forensic searches to identify intrusion methods
  • Employ rigorous procedures to enable forensic results that can withstand scrutiny in a court of law
  • Explain the operation of digital components
  • Seize, image, deconstruct, and analyze digital media for evidence
  • Prepare professional reports
  • Present digital forensics results in a court of law as an expert witness

Coursework Examples

In past projects, students have had the opportunity to

  • Create an investigation plan for a digital forensics incident
  • Conduct a mobile incident response and investigation based on a classroom scenario
  • Use appropriate tools and procedures to check for the use of anti-forensics techniques
  • Conduct a Linux/Windows/Mac machine image investigation using FTK/EnCase
  • Identify malicious software, network activity, suspect traffic, and intrusion artifacts through a review and analysis of artifacts
  • Conduct a digital forensic investigation in a challenging environment

Industry Certification

This program can help prepare you for the following certification exam(s):

Digital Forensics and Cyber Investigation Master's Degree Requirements

Our curriculum is designed with input from employers, industry experts, and scholars. You'll learn theories combined with real-world applications and practical skills you can apply on the job right away.

Master's Courses

Core Courses

  • CBR 600
  • DFC 610
  • DFC 620
  • DFC 630
  • DFC 640
  • CYB 670

All courses must be taken in the order listed. 

You must complete each course with a grade of B or better to advance to the next course. The grade of C is not available for these courses. 

The courses in this program will have seven-day and 60-day options for the grade of Incomplete.

Other Requirements

  • You must maintain a GPA of 3.0 or higher at all times.
  • All degree requirements must be fulfilled within five consecutive years.
  • Any transfer credits must have been earned within the five-year time frame to be applied toward a graduate degree.

Career Preparation

This program is designed to help prepare you for work in government organizations, the private sector, and law enforcement agencies in the areas of computer and digital crime.

Experience Recommended for Success in the Program

We recommend a background in computing and programming. If you need to improve your computing skills, we recommend you take ASC 605. If you have not taken programming courses, we recommend you take ASC 609. We recommend ASC 601 if you'd like to improve your graduate writing skills.

Facts & Figures

Student Clubs and Organizations

    Type: Student organization
    Available To: Undergraduate and Graduate

    The Computing Club aims to create a dynamic environment where members can work collaboratively, share innovative ideas, enhance their career-readiness, and gain marketable experience in their respective fields.

    Type: Student organization
    Available To: Undergraduate and Graduate

    The Cyber Competition Team represents UMGC at various cybersecurity events and highly competitive tournaments nationwide. Being a member of the team allows students to develop their cybersecurity skills and to network with other students with similar interests.

Additional Information

Technology Requirements

The cyber security curriculum requires that you use a computer with the following:

  • Microphone and speakers or headset with microphone or equivalent device
  • 5 GB of free hard drive space
  • 2 GB RAM or higher
  • A high-speed internet connection
  • Computer processor running at speeds of at least 1 GHz
  • Windows 7 or Mac OS X 10.6 or higher for an operating system (Linux operating systems can also be used but require more technical knowledge from the user)

Get a Head Start on a Cybersecurity Master's Degree or Certificate

Students who complete the bachelor's degree in computer networks and cybersecurity may be eligible to reduce their total coursework for the following graduate degree and certificate programs by 6 credits:

  • Cybersecurity management and policy
  • Cybersecurity technology
  • Digital forensics and cyber investigation

To be eligible, you must have completed CMIT 495 no earlier than spring 2019. If eligible, you may be awarded credit for CBR 600. This the only course for which credit may be granted through this educational relationship.

Admission requirements and time limits for degree completion apply to all applicants.

Frequently Asked Questions About the Program

What do I need to do to succeed in the Master of Science in digital forensics and cyber investigation? +

This program is open to anyone but some basic knowledge of IT is helpful. If you have no IT background, it is strongly recommended that you take the non-credit preparation course in IT prior to taking CYB 610.

Whom is the Master of Science in Digital Forensics and Cyber Investigation geared toward? +

This program is designed for those who want to develop skills and competencies in the analysis of digital evidence. This may lead to positions tracking cyber intruders or digital evidence within government and private organizations as well as law enforcement.

What will I get from the Master of Science in digital forensics and cyber investigation? +

This program focuses on the investigation area of a cyber attack and collecting evidence from digital assets of other specific activity. It will help you develop your competencies in finding, accessing and analyzing digital evidence left on a variety of devices from computers to smartphones and tablets. The program will require that you become adept with network, computer, and digital analysis technologies at an intermediate level.