13
A workflow experiment or (The Unexpected Virtue of Ignorance) Dr James Baker Curator, Digital Research @j_w_baker

A workflow experiment; or (The Unexpected Virtue of Ignorance)

Embed Size (px)

Citation preview

A workflow experiment or (The Unexpected Virtue of Ignorance)

Dr James Baker

Curator, Digital Research

@j_w_baker

www.bl.uk 3

1. Increase and maintain awareness of the existence and

evolution of forensic tools through examples of usage by small

and large archival institutions.

2. Put in place mechanisms for initial and ongoing training in

forensic theory and practice.

9.1. Strategic Activities for Information Schools and

Professional Bodies

Jeremy Leighton John (2012) Digital Forensics and Preservation. DPC Technology Wtch Report 12

doi: 10.7207/twr12-03

www.bl.uk 4

3. Establish clear open policies and guidelines for originators and

family and others specifically regarding privacy and evidence

protection.

4. Follow recognized forensic principles such as (i) not relying on

any single digital technology, and (ii) corroborating and

consolidating findings through a multi-evidential approach.

9.2. Customary Practice for Memory Institutions

Jeremy Leighton John (2012) Digital Forensics and Preservation. DPC Technology Wtch Report 12

doi: 10.7207/twr12-03

www.bl.uk 5

5. Scope the feasibility of maintaining distinct lines between the

processing of overt, active information and the recovery of

ostensibly deleted, hidden information.

6. Ascertain means and ways for gauging the value of forensically

authenticated digital objects and the reliability of investigatory

tools in digital scholarship.

7. Explore and test the use of automation including digital

acquisition and hashing, bulk extraction, indexing, text

9.3. Ongoing Research and Development: Personal

Informatics

Jeremy Leighton John (2012) Digital Forensics and Preservation. DPC Technology Wtch Report 12

doi: 10.7207/twr12-03

www.bl.uk 7

Master Copies

Working Copies

Access Copies

Documentation

Directory Structure

www.bl.uk 8

FTK Imager

Quick View Plus

PowerISO

Virtual Clone Drive

Software

www.bl.uk 9

By container

By file system

By pro or no-pro

By too tricky right now…

Sort media

www.bl.uk 10

(final sort by failure)

Forensic capture (.e01)

Metadata

Second capture (.iso)

Capture!

www.bl.uk 11

Learning by doing

IDs are hard

Software wasn’t made for us

Expect to have to be flexible

Pleasant surpises

Scale = effort

Distribute knowledge!

Lessons or (The Unexpected Virtue of Ignorance)

www.bl.uk 12

Curatorial

Public

For preservation

Access, access, access