Professional Documents
Culture Documents
AcquiringandProcessingBornDigitalMaterialsfromPublicOfficials
AcquiringandProcessingBornDigitalMaterialsfromPublicOfficials
AcquiringandProcessingBornDigitalMaterialsfromPublicOfficials
will help us gather context of what is stored. Usually, born-digital objects tend to not
be as organized in the same way as physical objects, so asking the right questions first
will enable you to understand more about the content and context of the files. Many
times, the donor may not really know the types of digital files that are on their
computer. It will also be beneficial to have all of the external media organized
together. Because born-digital objects can easily be disorganized, organizing all of the
physical objects together will ensure that all of the digital objects will be acquired.
The Digital Services Lab has a mobile forensic station that can capture a forensic image
of the hard drive. This process can either be done on-site or in the Center.
AcquiringandProcessingBornDigitalMaterialsfromPublicOfficials
them know that they do not have to do any organization to their filesit is our job to
capture the image and make sense of what files are on the drive.
They also need to understand that because we are capturing digital images of files,
nothing can be deleted. The image will be a digital representation of the digital work
environment.
Last, they need to understand that we will not have copies of the actual files
themselves, only the digital images captured with the digital forensic software.
Because of this distinction, it will be important to tell them about expectations of
retaining historical context in the archive.
If they change content and share files with others, this will alter the historical accuracy
of the content that is retained at the Center. We cant control what they do with their
own files, but it is important to let them know the implications of editing and sharing
files that have been digitally captured by us.
Preserving email
When preserving email, the Digital Services Lab does not just want to acquire the raw
text of the messages; we want to preserve the data of the email along with the text.
Preserving the data will enable us to digitally categorize and organize contents of the
email. If we just have the text preserved, we cannot effectively organize email
messages.
The two protocols used to store email messages are Internet Message Access Protocol
(IMAP) and Post Office Protocol (POP). We want to use these protocols to download
email data. These protocols are used in widely-used internet email clients such as
Yahoo and Gmail.
For instance, the State of Arkansas uses Microsoft Outlook for their official email
accounts, which is not an internet based system but a software based. Outlook has the
ability to allow users to download .PST data files. After downloading the .PST files, the
Digital Services Lab can use the digital forensic software in the same manner as we
would with other digital files.
Speak with the Director of Technology and Digital Initiatives to understand the official
procedure to acquire email messages.
/1014
AcquiringandProcessingBornDigitalMaterialsfromPublicOfficials
Glossary
BitCuratorAn open-source digital forensic platform designed for proper acquisition of digital files.
Digital images
Images are virtual snapshots of digital files. An image contains the content and metadata of
the file. Images are important because they do not run the risk of the actual digital file being
overwritten, deleted, or edited.
Guymager
A tool designed to create a digital image of a file
Checksum
A process used to see if a file has been altered
Bulk extractor
A tool designed to extract and view specific information from a digital image. You can scan
for information including phone numbers, file types, and email addresses.
Forensic bridge
A USB device designed to block a user from writing content onto a drive.
Fiwalk
A program that processes results of a digital image file into an XML format.
OAISOpen archival information system
OAIS Requirements
Referenc
Provenance
Context
Fixity
AcquiringandProcessingBornDigitalMaterialsfromPublicOfficials
Root:
The top-level directory in the Linux file system. The only directories that should be used are
from the home directory.
Base 16 and Base 64:
Encoding schemes that convert binary data into ASCII formats.
Contact Information
If you have any questions, contact Chad Garrett at cxgarrett@ualr.edu
/1014