All posts by Alexandra Chassanoff

Last week, members of the BitCurator team visited New Orleans for the 2013 Society of American Archivists (SAA) Joint Annual Meeting. On Tuesday, August 13, we presented a poster at the 7th Annual SAA Research Forum on how the BitCurator environment can support archivists’ preservation goals in institutions.

In our poster, we described four preservation scenarios during the creation and ingest of a disk image into an archival repository. We then showed how the output generated by BitCurator tools during each scenario can be captured and stored as PREMIS-encoded preservation events.

Event 1: Image Capture
Definition: A forensic disk image is extracted from the original media source and created.
Tool: Guymager
Metadata: Acquisition time; duration of capture; manufacturing device & serial number; user who performed acquisition; cryptographic hash values

Event 2: File System Analysis
Definition: A set of file-objects corresponding to all of the files and directories identified on a disk image is analyzed and reported.
Tool: fiwalk
Metadata: Time of analysis; duration of analysis; user who performed file system analysis; file system partitions; file system volumes

Event 3: Feature Analysis
Definition: Describes forensic analysis of the raw bitstream, producing reports on specific features of interest (such as personally identifying or other sensitive information).
Tool: bulk extractor
Metadata: Time of analysis; execution environment; number of reports produced;

Event 4: Redaction
Definition: Used to overwrite specific patterns within the disk image according to a user-supplied rule-set.
Metadata: Time of redaction; environment details; user performing redaction; name of new redacted image

Do you have born-digital collections that you’re grappling with?  Old media with file-systems that you can’t read?  Concerns about disseminating your collections because they might contain sensitive information?  Have you created disk images but don’t yet have the ability to process that data on the images?

Or are you a developer who would like to tackle some real-world challenges that will directly benefit collecting institutions in caring for born-digital materials?  Are you adept at developing and applying open-source software and would like to learn through hands-on experience how to apply various open-source digital forensics tools to collections?

If you answered “yes” to any of the above, then we have an event for you!

The Open Planets Foundation and the University of Chapel Hill’s School of Library and Information Science proudly presents:

The OPF Hackathon at UNC Chapel Hill:
Tackling Real-World Collection Challenges with Digital Forensics Tools and Methods

Monday, June 3rd-Wednesday, June 5th
Registration cost: $150 (REDUCED!)
*includes 3 lunches and 2 dinners

Come join world renowned digital preservation experts, collection managers, and coders as we collectively hack through digital preservation problems using a variety of digital forensics methods and approaches.

Our expert facilitators will be available to provide hands on guidance.    We will also be presenting awards for best collection challenge and best technical solution!

This is the first OPF Hackathon taking place in the United States and we are thrilled to host you as we hack out solutions to common problems in born-digital collections.

Event information:
Registration page:

We’re excited to announce the newest release of the DFXML TAG library,  which contains tags for all fiwalk-generated output.  The next release will contain tags for bulk extractor technical metadata and some additional file system metadata.  Special thanks to Marty Gengenbach, now the Electronic Records Archivist at the Kansas Historical Society, who began compiling the TAG Library as a master’s student at UNC SILS.