Documenting Digital Forensics Workflows

Abstract

In recent years, the digital preservation and archives communities have increasingly integrated forensics tools in workflows for the acquisition and ingest of content. While such tools help ensure the authenticity and integrity of content, the documentation of our workflows—what actions we’ve taken and when—are significant factors in capturing the digital provenance of archival materials. In this short presentation, I will discuss my work refining and extending Python scripts from the digital preservation community to create PREMIS metadata for actions such as disk image creation, forensic feature analysis, and file format identification.