The Scientific Working Group on Digital Evidence (SWGDE) brings together organizations
actively engaged in the field of digital and multimedia evidence to foster communication
and cooperation as well as to ensure quality and consistency within the forensic
If these are your interests, we would like to welcome you to our site. We hope you will find
the information found within to be of benefit.
Mary Horvath, Chair Federal Bureau of Investigation
James Darnell, Vice Chair US Secret Service
- New documents from the June 2019 meeting have been posted.
SWGDE is actively
encouraging new membership! Learn about attending a meeting as a guest or
applying for membership.
SWGDE's most recent published documents are:
SWGDE Best Practices for Mobile Device Evidence Collection and Preservation, Handling, and Acquisition
SWGDE General Photography Guidelines for the Documentation of Evidence Items in the Laboratory
SWGDE Technical Overview for Forensic Image Comparison
SWGDE seeks feedback from the DME community on our drafts for public
SWGDE Core Technical Concepts for Time-Based Analysis of Digital Video Files
SWGDE Best Practices for Digital Evidence Acquisition from Cloud Service Providers
SWGDE Best Practice for Frame Timing Analysis of Video Stored in ISO Base Media File Formats
Myth of the
All hard drives can be imaged at the same speed.
Category: All DME Myths
There are many variables that impact the speed at which a hard drive can be imaged. Some common variables include, the imaging tool used, the speed of the hard drive, presence or absence of bad sectors on the hard drive, and the type of drive connection. Most of these variables cannot be controlled by the examiner. For example, imaging the same 64 GB SATA SSD with one software tool took 36 minutes, a different tool took 33 minutes for the same drive and a hardware imager took 6 minutes.