SWGDE

Scientific Working Group on Digital Evidence

Search current documents

Browse current documents

The Scientific Working Group on Digital Evidence (SWGDE) brings together organizations actively engaged in the field of digital and multimedia evidence to foster communication and cooperation as well as to ensure quality and consistency within the forensic community.

If these are your interests, we would like to welcome you to our site. We hope you will find the information found within to be of benefit.

Read more in About Us

Mary Horvath, Chair
Federal Bureau of Investigation

James Darnell, Vice Chair
US Secret Service

Announcements

- New documents from the June 2019 meeting have been posted.
Membership
SWGDE is actively encouraging new membership! Learn about attending a meeting as a guest or applying for membership.
Newest Publications
SWGDE's most recent published documents are:
  • SWGDE Best Practices for Mobile Device Evidence Collection and Preservation, Handling, and Acquisition
  • SWGDE General Photography Guidelines for the Documentation of Evidence Items in the Laboratory
  • SWGDE Technical Overview for Forensic Image Comparison
Provide Feedback
SWGDE seeks feedback from the DME community on our drafts for public comment:
  • SWGDE Core Technical Concepts for Time-Based Analysis of Digital Video Files
  • SWGDE Best Practices for Digital Evidence Acquisition from Cloud Service Providers
  • SWGDE Best Practice for Frame Timing Analysis of Video Stored in ISO Base Media File Formats

Myth of the Day

All hard drives can be imaged at the same speed.
Category: All DME Myths
There are many variables that impact the speed at which a hard drive can be imaged. Some common variables include, the imaging tool used, the speed of the hard drive, presence or absence of bad sectors on the hard drive, and the type of drive connection. Most of these variables cannot be controlled by the examiner. For example, imaging the same 64 GB SATA SSD with one software tool took 36 minutes, a different tool took 33 minutes for the same drive and a hardware imager took 6 minutes.
See Myths