There are two primary workflows for digital forensics:
| Workflow | Description |
|---|---|
Bulk forensic imaging for preservation | Create forensic images to support acquisition and preservation of born-digital archives. Transfer forensic images into digital backlog until further processing is scheduled. |
Collection-based forensics for archival processing and monetary appraisal | Create forensic images to support acquisition and archival processing of born-digital archives. Select files from forensic images and transfer files to ingest storage for transfer into digital preservation system. |
Bulk forensic imaging for preservation
- Add item to register of digital storage devices.
- Prepare item for forensic imaging.
- Use FTK Imager to create a forensic image of item.
- Transfer forensic images to Libraries' digital backlog storage for preservation until further processing.
- Delete local copy of forensic image after transfer validation.
- Update entry in register of digital storage devices.