Digital forensics case
- Creighton Barrett
Definition
An organized set of activities that support the recovery of data stored on obsolete digital storage devices acquired as part of a fonds or collection.
Overview
Digital forensics is a branch of forensic science that involves the recovery and analysis of material found on digital storage devices. The University Archives operates a small digital forensics lab to support the acquisition and appraisal of archival material acquired on computers, external hard drives, and other digital storage devices.
Lab activities and data storage are organized around digital forensics “cases” that are conducted in accordance with the archival principle of respect des fonds.
Each digital forensics case combines several “core functions” of archives:
Digital forensics cases are conducted with the ultimate goal of long-term preservation and access to digital archival material. Digital forensics cases can also involve privacy reviews and copyright risk assessments.
Related terms
Forensic image
Data object
Documentation
Further reading
Archives Learning Community - Digital Forensics