Collections > Master's Papers > School of Information and Library Science > The Time-Cost of Digital Forensics for Archival Collections
pdf

This study describes an experiment in which I performed a series of digital forensics tasks on different forms of digital media. The experiment was conducted in order to determine the time needed to complete these digital forensics tasks. Findings indicate that disk images and forensic reports can be generated quickly, often within seconds, for media of small storage sizes, such as floppy disks. However, for media with large amounts of storage, such as an external hard drive, a single task (generating a disk image) can take several days to complete.