Definition

An organized set of activities that support the recovery of data stored on obsolete digital storage devices acquired as part of a fonds or collection.

Overview

Digital forensics is a branch of forensic science that involves the recovery and analysis of material found on digital storage devices. The University Archives operates a small digital forensics lab to support the acquisition and appraisal of archival material acquired on computers, external hard drives, and other digital storage devices.

Lab activities and data storage are organized around digital forensics “cases” that are conducted in accordance with the archival principle of respect des fonds.

Each digital forensics case combines several “core functions” of archives:

• Acquisition

• Accessioning

• Archival appraisal

• Archival arrangement

Digital forensics cases are conducted with the ultimate goal of long-term preservation and access to digital archival material. Digital forensics cases also involve privacy reviews and copyright risk assessments.