The Maryland Institute for Technology in the Humanities has released presentations from the Computer Forensics and Born-Digital Content in Cultural Heritage Collections meeting.
Here's an excerpt from the meeting's background document:
While such [computer forensics] activities may seem (happily) far removed from the concerns of the cultural heritage sector, the methods and tools developed by forensics experts represent a novel approach to key issues and challenges in the archives community. Libraries, special collections, and other repositories increasingly receive computer storage media (and sometimes entire computers) as part of their acquisition of "papers" from contemporary artists, writers, musicians, government officials, politicians, scholars, and other public figures. Cell phones, e-readers, and other data-rich devices will surely follow. The same forensics software that indexes a criminal suspect's hard drive allows the archivist to prepare a comprehensive manifest of the electronic files a donor has turned over for accession; the same hardware that allows the forensics specialist to create an algorithmically authenticated "image" of a file system allows the archivist to ensure the integrity of digital content once committed to an institutional repository; the same data recovery procedures that allow the specialist to discover, recover, and present as trial evidence an "erased" file may allow a scholar to reconstruct a lost or inadvertently deleted version of an electronic manuscript—and do so with enough confidence to stake reputation and career.
