A group of Stanford Special Collections staff just returned from a two day training course on computer forensics. The training was very intensive and focused on the DOS and Windows operating systems. I found the training excellent as we spent a large part of the course understanding how computer hardware and operating systems interact. More importantly, we were introduced to how forensic tools take advantage of operating system design. File allocation tables in DOS and Windows environments leave specific forensic trails.
Stanford University Libraries has just received notice that our Forensic Recovery of Evidence Devices (FREDs) are almost ready to ship. The expected shipping date for this lab equipment is slated for August 13th. The FREDS will be the keystone in SULAIR's new Digital Forensics Lab and will give us the capability to preserve and analyze born digital collection materials. The FREDS are configured to read all types of hand held media including hard drives, CDs/DVDs, 3 1/2" and 5 1/2" floppy disks, multiple tape formats and most types of consumer grade flash memory.