These documents have been voted for release in draft form by the SWGDE membership and are open to the public
for comments. Please review and submit feedback. All recieved feedback will be reviewed and addressed by
SWGDE before publishing a document as final.
This document provides best practices for the collection, preservation, and acquisition of evidence from mobile devices. The collection and preservation of data from mobile devices is performed in the field, as well as the lab. Increasingly, field personnel are also performing acquisitions. This document provides best practices for the three functions that are likely to be needed by field personnel. The intended audience is personnel qualified to collect, preserve, or acquire digital evidence.
The purpose of this document is to provide guidelines on general photography of items in a laboratory to document the condition before, during, and/or after the analysis of evidence items. The information in this document is intended for photographs that are for general documentation purposes; not comparative analysis.
The purpose of this document is to explain that the use of the MD5 and SHA1 hash algorithms remains acceptable for certain functions in digital and multimedia forensic disciplines despite the algorithms having been shown to be inappropriate for broader cryptographic purposes.
The purpose of this document is to provide image analysis practitioners information as to the historical background of Forensic Image Comparison, as well as the technical foundation, methodology, and limitations when engaging in Forensic Image Comparison.