SWGDE

Scientific Working Group on Digital Evidence

SWGDE Drafts For Public Comment

These documents have been voted for release in draft form by the SWGDE membership and are open to the public for comments. Please review and submit feedback. All recieved feedback will be reviewed and addressed by SWGDE before publishing a document as final.


SWGDE Best Practices for Mobile Device Evidence and Collection, Preservation, and Acquisition
Published: 2018-12-04 | Version: 1.0
This document provides best practices for the collection, preservation, and acquisition of evidence from mobile devices. The collection and preservation of data from mobile devices is performed in the field, as well as the lab. Increasingly, field personnel are also performing acquisitions. This document provides best practices for the three functions that are likely to be needed by field personnel. The intended audience is personnel qualified to collect, preserve, or acquire digital evidence.
Comments: 0

SWGDE General Photography Guidelines for the Documentation of Evidence Items in the Laboratory
Published: 2018-12-04 | Version: 1.0
The purpose of this document is to provide guidelines on general photography of items in a laboratory to document the condition before, during, and/or after the analysis of evidence items. The information in this document is intended for photographs that are for general documentation purposes; not comparative analysis.
Comments: 0

SWGDE Position on the Use of MD5 and SHA1 Hash Algorithms in Digital and Multimedia Forensics
Published: 2018-12-04 | Version: 1.0
The purpose of this document is to explain that the use of the MD5 and SHA1 hash algorithms remains acceptable for certain functions in digital and multimedia forensic disciplines despite the algorithms having been shown to be inappropriate for broader cryptographic purposes.
Comments: 0

SWGDE Technical Overview for Forensic Image Comparison
Published: 2018-12-04 | Version: 1.0
The purpose of this document is to provide image analysis practitioners information as to the historical background of Forensic Image Comparison, as well as the technical foundation, methodology, and limitations when engaging in Forensic Image Comparison.
Comments: 0