This course WILL count towards the synchronous-course requirement for the certificate programs. A minimum of two courses must be synchronous (in person or virtual).
This course will count towards the DAS certificate program.
This virtual, synchronous course will be held from 1:00 p.m. to 5:00 p.m. U.S. central time on each day.
The field of digital forensics often evokes imagery of prime-time television crime dramas. But what is it, and how can archivists put digital forensics tools and processes to use in their home institutions? Archivists are more likely than ever to be confronted with collections containing removable storage media (e.g., floppy disks, hard drives, thumb drives, memory sticks, and CDs). Storage media analysis and disk imaging using digital forensics methods can help us transfer, accession, appraise, describe, and even provide access to digital archives, depending on the nature of the content. Digital forensics techniques allow archivists to extract whatever useful information resides on the medium while avoiding the accidental alteration of data or metadata, providing information that can be used throughout the processing workflow. They allow archivists to appraise content that is not compatible with modern operating systems and computers. They allow curators to capture an artist or donor’s working environment, and to replay this environment back to users via emulation.
A basic understanding of how computers store data, what a file system is, and when to use forensics techniques are necessary foundations for getting started. In this course, you’ll explore the layers of hardware and software that allow bitstreams on digital media to be read as files, the roles and relationships of these layers, and interactive tools and techniques for interacting with files at each layer. You’ll learn about what disk imaging is, when you might use it, and tools that you can use.
This course is specifically designed as a precursor and prerequisite to the two-day Digital Forensics for Archivists: Advanced DAS course. Creating a disk image, along with troubleshooting and other activities that build on this knowledge, occur in the Advanced course. Students will not need any special software to complete this course.
In addition to the virtual course session, join the instructors of SAA Digital Forensics Fundamentals and Advanced courses to troubleshoot any issues you were unable to resolve in class (Fundamentals), get support on pre-course activities (Advanced), or dig deeper on any of the topics in the coursework. Even if you don’t have a specific question, you are welcome to drop in and join the conversations that ensue from working out issues together.
Office Hours Structure and Date
Time and date: Jan. 26, 2026, 3-4pm ET / 2-3pm CT
Note that this is an 1-hour virtual meeting that will be a drop in for any Fundamentals or Advanced registrants to get support on any of the activities completed in the Fundamentals course or homework assigned for the Advanced.
Upon completion of this course, you'll be able to:
- Demonstrate an understanding of the principles, tools, and technologies of digital forensics
- Explore how digital forensics tools and techniques can apply to an archival setting
- Consider a range of digital forensics tools, and use some of them to analyze files
- Consider the layers of hardware and software that allow bitstreams on digital media to be read as files when troubleshooting problems with capture or processing
- Determine when it is appropriate to create a disk image
Who Should Attend:
Archivists, manuscript curators, librarians, and others who are responsible for acquiring or transferring collections of digital materials—particularly those that are received on removable media
What You Should Already Know:
Basic computer literacy; participants should understand how to install and use software in general and be able to read and comprehend basic (though detailed) technical concepts
DAS Tier: Foundational
DAS Core Competency:
1. Explain the nature of digital records and their lifecycle.
3. Formulate strategies and tactics for appraising, acquiring, describing, managing, organizing, preserving, and delivering digital archives.
4. Incorporate technologies throughout the archival lifecycle.
6. Employ standards and best practices in the management of digital archives.
If you intend to pursue the DAS Certificate, you will need to pass the examination for this course.
Registration Fee: Early-Bird / Regular
SAA Members: $299 / $349
Employees of SAA Member Institutions: $359 / $419
Nonmembers: $419 / $479