The Scientific Working Group on Digital Evidence (SWGDE) brings together organizations
actively engaged in the field of digital and multimedia evidence to foster communication
and cooperation as well as to ensure quality and consistency within the forensic
If these are your interests, we would like to welcome you to our site. We hope you will find
the information found within to be of benefit.
Mary Horvath, Chair Federal Bureau of Investigation
James Darnell, Vice Chair US Secret Service
- New documents from the June 2019 meeting have been posted.
SWGDE is actively
encouraging new membership! Learn about attending a meeting as a guest or
applying for membership.
SWGDE's most recent published documents are:
SWGDE Best Practices for Mobile Device Evidence Collection and Preservation, Handling, and Acquisition
SWGDE General Photography Guidelines for the Documentation of Evidence Items in the Laboratory
SWGDE Technical Overview for Forensic Image Comparison
SWGDE seeks feedback from the DME community on our drafts for public
SWGDE Core Technical Concepts for Time-Based Analysis of Digital Video Files
SWGDE Best Practices for Digital Evidence Acquisition from Cloud Service Providers
SWGDE Best Practice for Frame Timing Analysis of Video Stored in ISO Base Media File Formats
Myth of the
Digital forensic examiners are able to have all available forensic tools on-site to conduct all types of digital forensic analysis.
Category: All DME Myths
Many forensic analysis processes require advanced tools that are not easily portable. Advanced password cracking tools run on high-powered, large desktop computers or even require a network of large, high-powered computers. Other forensic tools, such as chip-off equipment, are not created to be moved from their permanent location. Additionally, the evidence scene often presents conditions and challenges that are out of the control of personnel. Good scientific techniques, as well as the prudent desire to minimize avoidable negative impact, dictate to eliminate adverse conditions that are in one’s control at the scene by moving items to a controlled environment, if possible. This is no different from what happens every day in normal crime scene investigations. Some analyses on evidence that could be done at the scene are conducted at the laboratory to which the evidence is taken.