gengenbach-forensic-workflows-2012

access to born-digital content in archival settings. 13
The study presented in this paper used semi-structured interviews with archivists
and curators to investigate the implementation of digital forensics practices for managing
born-digital content in collecting institutions. My research objective has been
exploratory; my original intent was to examine how collecting institutions integrate
digital forensics tools and processes into their workflows for managing born-digital
content from acquisition to the provision of access. High-level workflow models based
on the information gathered through those interviews provide additional documentation
and context for archives and special collections seeking to develop their own processes
for managing born-digital content.
Defining Digital Forensics
Literature Review
Before delving into the relevant literature, it will be helpful to provide a brief
discussion of the term digital forensics in the context of this work. While the definition
provided above is accurate, it is useful to consider others. In 2001, at the first meeting of
the Digital Forensics Research Workshop (DFRWS), the following was adopted as a
definition for digital forensics:
The use of scientifically derived and proven methods toward the preservation,
collection, validation, identification, analysis, interpretation, documentation and
presentation of digital evidence derived from digital sources for the purpose of
facilitating or furthering the reconstruction of events found to be criminal, or
helping to anticipate unauthorized actions shown to be disruptive to planned
operations. 14
13 This will be further explored in the next section of the present work.
14 Gary Palmer, A Road Map for Digital Forensic Research.Technical Report DTR- T0010-01, DFRWS,
November 2001. Report from the First Digital Forensic Research Workshop (DFRWS): 16,
http://www.dfrws.org/2001/dfrws-rm-final.pdf (accessed August 2012).
6