This course WILL count towards the synchronous-course requirement for the certificate programs. A minimum of two courses must be synchronous (in person or virtual).
This course will count towards the DAS certificate program.
This virtual, synchronous course will be held from 1:00 p.m. to 5:00 p.m. U.S. central time on each day.
Students will build on work done in FRN1 and move from discussion to the application of digital forensics concepts to archival processes. This course delves deeper into the layers of hardware and software that enable bitstreams on digital media to be read as files. Further, this course will explore the roles and relationships among these layers, as well as tools and techniques for ensuring the completeness and evidential value of data. During this course, students will think about and describe digital forensic archival workflows. Students will engage with tools that support these workflows and examine the impact of tools and workflows on archival practice. Students will experience using tools, software, and workflows. This course includes a discussion and provides examples of granting users access to forensic-captured and preserved data.
This course will consist of hands-on activities and require participants to bring sample data or use supplied sample data for those activities. Tools used in these activities include various operating systems command lines, BitCurator VMs, disk imaging software, and others. Participants will need either admin access to a pc or a Mac. They should ensure that their chosen computer can handle the installation and operations of Oracle VirtualBox. Downloads, User Guides, and installation information are available from: virtualbox.org
In addition to the virtual course session, join the instructors of SAA Digital Forensics Fundamentals and Advanced courses to troubleshoot any issues you were unable to resolve in class (Fundamentals), get support on pre-course activities (Advanced), or dig deeper on any of the topics in the coursework. Even if you don’t have a specific question, you are welcome to drop in and join the conversations that ensue from working out issues together.
Office Hours Structure and Date
Time and date: Jan. 26, 2026, 3-4pm ET / 2-3pm CT
Note that this is an 1-hour virtual meeting that will be a drop in for any Fundamentals or Advanced registrants to get support on any of the activities completed in the Fundamentals course or homework assigned for the Advanced.
Upon completion of this course, you'll be able to:
- Explain the roles and relationships between the main layers of technology required to read a string of bits off of a physical storage medium and treat it as a file
- Identify various forms of data that may be "hidden" on the physical storage medium
- Use write blockers and create disk images in order to prevent accidental manipulation of volatile data
- Identify and extract the data that a file system uses to manage files
- Apply digital forensics tools and methods to collections of records
- Identify and compare alternative strategies for providing public access to data from disk images
Who Should Attend:
Archivists, manuscript curators, librarians, and others who are responsible for acquiring or transferring collections of digital materials, particularly those that are received on removable media
What You Should Already Know:
Participants are expected to know basic archival practice and have intermediate knowledge of computers and digital records management. Participants should have some familiarity with virtual machines and the command line.
DAS Tier: Tools and Services
DAS Core Competency:
1. Explain the nature of digital records and their lifecycle.
3. Formulate strategies and tactics for appraising, acquiring, describing, managing, organizing, preserving, and delivering digital archives.
4. Incorporate technologies throughout the archival lifecycle.
6. Employ standards and best practices in the management of digital archives.
7. Design a defined set of services for designated community.
If you intend to pursue the DAS Certificate, you will need to pass the examination for this course.
Registration Fee: Early-Bird / Regular
SAA Members: $299 / $349
Employees of SAA Member Institutions: $359 / $419
Nonmembers: $419 / $479