Workshop 3

474 views

Published on

Published in: Education, Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
474
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
6
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Workshop 3

  1. 1.   Workshops  on  Born-­‐Digital  Materials  Workflow       Peter  Chan,  Digital  Archivist   Oct.  27,  2011  
  2. 2. Week  3  Agenda  •  Problems  in  Capturing  Floppy  Disks  •  FTK  Setup   –  Distributed  Processing;  Files  LocaNons;  Account   types;  Backup  &  Restore;  Labels  •  Processing  using  FTK  •  AT   –  Processing  notes;  Alternate  extent;  Added  entries    
  3. 3. Problems  in  Capturing  Floppy  Disks  •  Sophos  under  Win  7  will  claim  the  compleNon   of  scanning  a  floppy  disk  even  though  it  don’t   recognize  the  file  format.  •  FTK  Imager  under  Win  7  will  claim  the  imaging   of  a  floppy  disk  successful  even  though  it   don’t  recognize  the  file  format.  
  4. 4. Ensure  Accruate  Virus  Check  •  PC   –  List  the  directory  of  the  floppy  disk   –  Run  Sophos  on  the  floppy  •  Mac   –  List  the  directory  of  the  floppy  disk   •  Double  click  on  the  floppy  disk  drive   –  Open  Sophos  AnNvirus   –  “+”  Custom  Scan   –  Start  Scan    
  5. 5. Desktop  
  6. 6. Directory  List  
  7. 7. Add  Custom  Scan  
  8. 8. Select  Device  
  9. 9. Start  Scan  
  10. 10. Scan  Result  
  11. 11. Mac  FTK  Imager  •  No Graphical User Interface"•  click on "Terminal" icon"•  cd ~/Desktopdiskutil list (find disk identifier that corresponds to NAME of disk)"•  diskutil unmountDisk /dev/disk1(match device found from diskutil list)"•  ./ftkimager /dev/disk1 media_filename -- verify"
  12. 12. Floppy  Disk  Icon  
  13. 13. Floppy  Disk  Capture  
  14. 14. Files  Generated  by  FTK  Imager  
  15. 15. AccessData  FTK  –  YouTube  •  Create  New  Case  •  Technical  Metadata  Extracted  by  FTK  •  View  Files  in  “obsolete”  File  Formats  •  View  Image  Files  as  Thumbnails  •  Search  for  Restricted  Files  using  Index  /  Paaern  Search  •  Flag  Restricted  Files  as  Privileged  •  Change  Column  Sebngs  to  Include  or  Exclude  InformaNon  •  Apply  Filter  to  Items  to  be  Displayed  •  Arrange  Files  in  Series  /  Subseries  by  Assigning  Bookmarks  •  See  Files  by  Bookmarks  •  Create  and  Assign  Labels  to  Files    •  View  Files  by  Labels    
  16. 16. Distributed  Processing  •  Distributed  Processing  allows  the  installaNon  of   the  Distributed  Processing  Engine  (DPE)  on   addiNonal  computers  in  your  network,  allowing   you  to  apply  addiNonal  resources  of  up  to  three   addiNonal  computers  at  a  Nme  to  the  processing   of  your  cases.  •  As  a  rule  of  thumb,  remember  that  Distributed   Processing  may  not  help  reduce  processing  Nmes   unless  the  number  of  objects  to  be  processed   exceeds  1,000  Nmes  the  number  of  cores.  
  17. 17. FTK  Files  OrganizaNon  •  Evidence  data  (Image  files)   –  Network  drive  (sul-­‐wallabyForensicsLab01-­‐ OBJECT_POOLCall#  NameDisk  Image)  •  Database       –  Local  drive  •  Case  data     –  Local  drive  •  Case  backup  data   –  Network  drive  (sul-­‐wallabyForensicsLab01-­‐ OBJECT_POOLCall#  NameFTK  Case  backup)  
  18. 18. FTK  Case  Backup  •  Backup:     –  Backup:     •  Protect  you  from  accidental  deleNon,  or  corrupNon  of  case   and  database  files.   •  FTK  copies  case  informaNon  and  database  files  (but  not   evidence)  to  a  chosen  folder.     –  Archive   –  Archive  and  Detach:     •  If  you  want  to  work  on  another  computer  or  release  space  in   the  database  drive.   •  copies  that  case’s  Oracle  database  table  space  file  to  the   Windows  Temp  folder,  then  deletes  it  from  the  Oracle   database.    
  19. 19. FTK  Case  Restore  •  Restore   –  Restore   –  Restore  a  case  from  a  backup  to  its  original  locaNon,  in  the  event  of   corrupNon  or  other  data  loss.     –  Aaach   –  Aaach  a  case  to  the  same  or  a  different  machine/database  than  the  one   where  it  was  archived  and  detached  from.  
  20. 20. FTK  Account  Types  •  ApplicaNon  Administrator  :  can  perform  all   types  of  tasks,  including  adding  and  managing   users.    •  Case  Administrator  can  perform  all  of  the   tasks  an  ApplicaNon  Administrator  can   perform,  with  the  excepNon  of  creaNng  and   managing  users.  •  Case  Reviewer:  cannot  create  cases;  can  only   process  cases.    
  21. 21. Search  Word  List  •  IdenNty:  social  security  no.,  SSN,  SS#  •  Financial:  credit  card  no.,  bank  account  no.  •  Student  informaNon:  grade,  recommendaNon  •  Staff  informaNon:  tenure,  appraisal  •  Health  record:  disease,  depression  •  Others:  confidenNal    
  22. 22. Index  Search  OpNons  •  Stemming  Words  that  contain  the  same  root,  such  as  raise   and  raising.    •  Phonic  Words  that  sound  the  same,  such  as  raise  and  raze.    •  Synonym  Words  that  have  similar  meanings,  such  as  raise  and   li9.    •  Fuzzy  Words  that  have  similar  spellings,  such  as  raise  and   raize.  Click  the  arrows  to  increase  or  decrease  the  number  of   leAers  in  a  word  that  can  be  different  from  the  original  search   term.  Use  this  feature  carefully;  too  many  leAer  differences   may  make  the  search  less  useful.  
  23. 23. Label  •  Shared  Label   –  Create  labels  outside  cases  under  Manage  –   Labels   –  Labels  created  will  appear  in  Manage  Shared   Labels  •  Local  Label   –  Goto  the  case   –  Goto  Manage  –  Labels  –  Manage  Shared  Labels   –  Highlight  the  labels  you  want  to  “Copy  to  Case”  
  24. 24. FTK  Label  •  Access  Right   –  Archivist;  Public;  Reading  Room  •  Subject   –  LCSH;  Local  •  Name   –  Personal;  Corporate;  MeeNng;  Project  •  Title   –  Book;  ArNcle,  etc.  •  Geographic  LocaNon   –  Country;  City,  etc.  •  Genre   –  Photograph,  Sound,  Video,  etc.  
  25. 25. Create  Shared  Labels  
  26. 26. See  Shared  Labels  Inside  a  Case  
  27. 27. Copy  Shared  Labels  to  a  Case  
  28. 28. Shared  Labels  Copied  to  Local  Case  
  29. 29. Processing  notes  in  AT  •  Disk  /  logical  image,  why?  •  File  system  (PC/Mac)  •  Virus  check  result  •  Imaging  results  (success  rate)  •  Not  converted  media  ,  why?  plan?  (e.g.  open   reel  tapes,  punch  cards,  etc.)  •  Unrecognized  files  (special  backup  formats,   etc.)  
  30. 30. Extent  Statement  •  Alternate  Extent  (resource  record)   –  No.  of  files   –  Total  file  size  in  MB  round  up  in  2  decimal  places.  
  31. 31. Added  Entries  for  Born  Digital   Material  Series  •  Added  entries  for  the  born  digital  series   should  be  replicated  in  the  collecNon  level  so   that  they  will  be  transferred  to  SearchWorks.    
  32. 32. Access  DerivaNve  •  Image   –  TIFF  to  JPEG  (1920  pixels  wide)   –  Large  JPEG  to  JPEG  (1920  pixels  wide)   –  CRW,  NEF  to  JPEG  (1920  pixels  wide)  •  DLSS  is  doing  it  all  the  Nme.  
  33. 33. Display  DerivaNve  •  Text   –  Original:    WordStar,  WordPerfect,  format  not   recognizable  by  modern  word  processing  sopware   –  Access:  formats  supported  by  browser  (html,  etc.)  •  Tools   –  Transit  SoluNon   –  Adobe  Acrobat  Professional   –  Open  Office      
  34. 34. Outputs  •  Finding  aids   –  EAD  •  HypaNa   –  CollecNon  Level:  EAD   –  Item  Level:  FTK  •  Searchworks   –  Transform  selecNve  contents  to  MODS  from  EAD  
  35. 35. FTK  XML  Report  • <?xml  version="1.0"  encoding="UTF-­‐8"?>   <fo:root  xmlns:xs="hap://www.w3.org/2001/XMLSchema"  font-­‐family="arial  unicode  ms"   font-­‐size="10pt"          xmlns:fo="hap://www.w3.org/1999/XSL/Format">          <fo:layout-­‐master-­‐set>                  <fo:simple-­‐page-­‐master  master-­‐name="TOC">                          <fo:region-­‐body  region-­‐name="body"  margin-­‐top="0.5in"  margin-­‐boaom="1in"                                  margin-­‐lep="0.5in"  margin-­‐right="0.5in"/>                          <fo:region-­‐before  extent="0.5in"/>                          <fo:region-­‐aper  extent="0.5in"/>                  </fo:simple-­‐page-­‐master>                  <fo:simple-­‐page-­‐master  master-­‐name="caseInfoPage">                          <fo:region-­‐body  region-­‐name="body"  margin-­‐top="0.5in"  margin-­‐boaom="1in"                                  margin-­‐lep="0.5in"  margin-­‐right="0.5in"/>  ……….  
  36. 36. XSLT  TransformaNon  •  XML-­‐FO  file  designed  for  output  as  PDF  •  Need  an  XSLT  transformaNon  to  become  an   XML  content  file.  •  See  sample  at   –  haps://consul.stanford.edu/download/ aaachments/136253066/FTK+XSLT.xsl? version=1&modificaNonDate=1319816838204  

×