Photographic Equipment and Infrastructure Recommendations

16-P-001-2.0

Disclaimer Regarding Use of SWGDE Documents

SWGDE documents are developed by a consensus process that involves the best efforts of relevant subject matter experts, organizations, and input from other stakeholders to publish standards, requirements, best practices, guidelines, technical notes, positions, and considerations in the discipline of digital and multimedia forensics and related fields. No warranty or other representation as to SWGDE work product is made or intended.

SWGDE requests notification by email before or contemporaneous to the introduction of this document, or any portion thereof, as a marked exhibit offered for or moved into evidence in such proceeding. The notification should include: 1) The formal name of the proceeding, including docket number or similar identifier; 2) the name and location of the body conducting the hearing or proceeding; and 3) the name, mailing address (if available) and contact information of the party offering or moving the document into evidence. Subsequent to the use of this document in the proceeding please notify SWGDE as to the outcome of the matter. Notifications should be submitted via the SWGDE Notice of Use/Redistribution Form or sent to secretary@swgde.org.

From time to time, SWGDE documents may be revised, updated, deprecated, or sunsetted. Readers are advised to verify on the SWGDE website (https://www.swgde.org) they are utilizing the current version of this document. Prior versions of SWGDE documents are archived and available on the SWGDE website.

Redistribution Policy:

SWGDE grants permission for redistribution and use of all publicly posted documents created by SWGDE, provided that the following conditions are met:

Redistribution of documents or parts of documents must retain this SWGDE cover page containing the Disclaimer Regarding Use.
Neither the name of SWGDE nor the names of contributors may be used to endorse or promote products derived from its documents.
Any reference or quote from a SWGDE document must include the version number (or creation date) of the document and also indicate if the document is in a draft status.

Requests for Modification:

SWGDE encourages stakeholder participation in the preparation of documents. Suggestions for modifications are welcome and must be submitted via the SWGDE Request for Modification Form or forwarded to the Secretary in writing at secretary@swgde.org. The following information is required as a part of any suggested modification:

Submitter’s name
Affiliation (agency/organization)
Address
Telephone number and email address
SWGDE Document title and version number
Change from (note document section number)
Change to (provide suggested text where appropriate; comments not including suggested text will not be considered)
Basis for suggested modification

Intellectual Property:

All images, tables, and figures in SWGDE documents are developed and owned by SWGDE, unless otherwise credited.

Unauthorized use of the SWGDE logo or document content, including images, tables, and figures, without written permission from SWGDE is a violation of our intellectual property rights.

Individuals may not misstate and/or over represent duties and responsibilities of SWGDE work. This includes claiming oneself as a contributing member without actively participating in SWGDE meetings; claiming oneself as an officer of SWGDE without serving as such; claiming sole authorship of a document; use the SWGDE logo on any material and/or curriculum vitae.

Any mention of specific products within SWGDE documents is for informational purposes only; it does not imply a recommendation or endorsement by SWGDE.

1. Introduction

The purpose of this document is to provide guidance and recommendations for equipment, infrastructure, training, Standard Operating Procedure (SOP) development, and the security and integrity issues for photography in the forensic environment.

This document addresses the photographic documentation of events and/or subjects that are in the field, forensic laboratory, studio, or other controlled environment.

2. General Equipment Considerations

Equipment needs depend on the tasks performed and the intended use of the image. Evaluation of all equipment used to capture imagery should occur prior to use to ensure the equipment meets the need of the task performed and the intended end use of the image.

Agencies should identify specific camera requirements such as lenses, resolution, color fidelity, exposure capability, dynamic range, durability, file formats, and storage. For example, crime scene technicians should use a camera that is capable of manual settings and has interchangeable lenses, off-camera flash, and a tripod mount. A good quality point-and-shoot camera or an electronic device with good quality integrated camera capabilities may be sufficient for first responders.

The agency should have a specific mechanism for determining whether a piece of hardware meets requirements. Some applications, such as impression evidence, have specific quantitative and qualitative requirements regarding equipment or resolution (see SWGDE documents “Guidelines for Capturing Latent Impressions Using a Digital Camera in the Field”, “Guidelines for the Digital Imaging of Footwear and Tire Impressions”). Specification sheets may be used as a guide, but in most cases, it will be necessary to test the equipment under operational conditions.

Equipment acquisition and SOPs should ensure that field personnel are provided with adequate consumables (i.e. batteries, removable storage media) and accessories (i.e. flash, tripods). In addition, adequate physical storage and protection of equipment and media is necessary to maintain operations.

3. Infrastructure

Infrastructure refers to both hardware and software necessary to store, secure, process, transmit and output data. Creating and maintaining a sound infrastructure requires developing a needs assessment, validating, verifying, maintaining, and upgrading the systems. Inadequate infrastructure will undermine the ability to secure and efficiently utilize the images.

3.1 Needs assessment

An agency should perform a needs assessment to determine what infrastructure is necessary for its specific tasks and demonstrate how it plans to fulfill those obligations. This assessment identifies what tasks are to be performed, under what circumstances those tasks will be performed, and the end use of the imagery. Specific hardware, software, and training requirements can be targeted to tasks, circumstances, and end uses.

An important aspect to consider is image output. Output of images refers to display devices, printers, optical media and/or electronic file share programs. The end use of an image determines the appropriate output method. For example, the hardware requirements will differ significantly between images that are to be analyzed on an 8 x 10” print versus those that will be viewed with a projector or monitor.

3.2 Validation and Verification

Validation is a necessary part of infrastructure design and usage. The degree and type of validation should be reasonably targeted to the context within which the assets will be used; it is not necessary to validate functions or capabilities that will not be used. Verification that assets are functioning appropriately (sometimes called quality-control tests) should be an integral part of any SOP and must be conducted before the asset is put into use. If the asset has been repaired or taken out of service, verification that it is functioning appropriately must be conducted before use. The frequency and degree of verification may be application and agency specific.

3.3 Maintenance

Agencies should plan for and adopt strategies and responsibilities for preventive maintenance, repair, and inspection of hardware and software to maintain optimum performance and to prevent catastrophic failure.

3.4 Lifecycle

Infrastructure assets, particularly in a high-technology area such as imaging, are subject to wear, tear, and obsolescence. Equipment used will be subject to physical stress and will eventually require repair or replacement. Other assets, such as rechargeable batteries, have a finite lifespan. Technology advances quickly and newer, less expensive hardware/software may provide better results at a lower operational cost. New technologies may allow expansion of service opportunities or provide capabilities that were previously not available. Agencies should periodically assess their needs and determine if new technologies or upgrades are warranted.

4. Training

A training program is essential for successful image acquisition, processing, and output of images. Training programs should be designed and implemented to provide the skills and knowledge required to successfully perform at an appropriate level of responsibility. See SWGDE document “SWGDE Training Guidelines for Video Analysis, Image Analysis and Photography.”

5. SOP Development

SOPs are agency-specific and are important to provide structure, guidance, and to ensure consistency. See the SWGDE document “SWGDE Model SOP for Computer Forensics,” as an example.

6. Integrity and Security of Images

Integrity ensures that the original image is available in its unaltered form. Security is imperative to maintain integrity, which includes protection of portable data storage devices, computer facilities, and data stored and/or transmitted on computer systems. It involves the use of management and personnel, as well as operational and technical controls. Refer to SWGDE Document “Best Practices for Maintaining the Integrity of Digital Images and Digital Video.”

7. Categories of Photography

Photography generally falls into two different categories depending on the extent of documentation required. Each type will require different levels of training, knowledge, experience, and equipment.

In addition to general or advanced photographic knowledge, there are specialized applications that require additional training based upon specific needs, such as aerial, surveillance, arson, or hazardous materials (HAZMAT) photography.

7.1 General photography

Requires basic knowledge of camera operation and photographic composition
May allow automated camera settings
Utilized for documentation purposes. [1]Scientific Working Group on Digital Evidence. Image Categories in Forensic Science. SWGDE 23-P-001-1.0. SWGDE, 2025, https://www.swgde.org/documents/published-complete-listing/23-p-001-2/..
Images may be captured using a file format with minimal compression (i.e. jpeg)

7.1.1 Equipment for General Photography

A camera with flash, close-up capability, and sufficient resolution for the intended use.

7.1.2 Examples of General Photography

First responders are frequently called upon to document conditions they find at an incident where a crime scene photography unit or specialist may not be requested or available. Examples may include: domestic violence incidents, traffic accidents, minor property crimes, and other incidents as defined by agency-specific policies. Photography may not be the first responder’s primary responsibility and they may not have general photography training. The first responder must be cognizant that the images captured may contain important information that was not recognized at the time the photograph was taken. Unless first responders are trained in advanced photography techniques and have the equipment necessary for comparison and analysis, it is advised that they do not photograph these types of evidence. Agencies should designate the circumstances in which first responders should photograph and the circumstances that should prompt a request for individuals with advanced photographic training.

7.2 Advanced photography

Requires knowledge of manual exposure control, flash photography and other lighting controls, alternative light sources, use of tripods and remote shutter releases, filters, and other accessories
Requires the use of a Digital Single Lens Reflex (DSLR) camera or Mirrorless Interchangeable – Lens Camera (MILC) with manual settings, interchangeable lenses, and off-camera flash capabilities
Images intended for scientific analysis [1]Scientific Working Group on Digital Evidence. Image Categories in Forensic Science. SWGDE 23-P-001-1.0. SWGDE, 2025, https://www.swgde.org/documents/published-complete-listing/23-p-001-2/. should be captured using a file format with lossless or no compression (ie. RAW or TIFF) and the highest resolution available on the recording device. [2]Scientific Working Group on Digital Evidence. Digital Image Compression and File Formats Guidelines. SWGDE 16-M-001-3.0. SWGDE, 2024, https://www.swgde.org/documents/published-complete-listing/16-m-001-digital-image-compression-and-file-format-guidelines/.

7.2.1 Equipment for Advanced Photography

A DSLR or MILC camera that is capable of manual settings, with interchangeable lenses, off camera flash, remote shutter release, and a tripod mount
The camera settings should allow for the sufficient resolution for the intended use.
Cameras should be set to either uncompressed or lowest compression (highest quality format)
Other standard equipment may include:
- External battery packs
- Tripod
- Additional removable media
- 18% Gray card and/or color checker
- Various types of known scales
- Various types of filters
- External flashes and cords
- Remote shutter release
- Various types of lenses (macro, normal, zoom)

7.2.2 Examples of Advanced Photography

Advanced photography includes crime scene photography performed by a dedicated or specialized unit. The goal of crime scene photography is documenting evidence and other details of a crime scene in a true and accurate manner. Including, but not limited to, accurately representing details and colors; capturing overall, intermediate, close-up, and examination images with accurate spatial relationships; comparison images; and contending with varying lighting and physical conditions.

Other examples of advanced photography include but are not limited to documentation of friction ridge details, impressions, blood spatter, etc. Where specialized training and equipment may be required.

8. References

[1] Scientific Working Group on Digital Evidence. Image Categories in Forensic Science. SWGDE 23-P-001-1.0. SWGDE, 2025, https://www.swgde.org/documents/published-complete-listing/23-p-001-2/.

[2] Scientific Working Group on Digital Evidence. Digital Image Compression and File Formats Guidelines. SWGDE 16-M-001-3.0. SWGDE, 2024, https://www.swgde.org/documents/published-complete-listing/16-m-001-digital-image-compression-and-file-format-guidelines/.

9. History

Revision	Issue Date	History
1.0 DRAFT	9/15/2016	Initial draft created and SWGDE voted to release as a Draft for Public Comment.
1.0 DRAFT	10/8/2016	Formatted and technical edit performed for release as a Draft for Public Comment.
1.0	1/12/2017	Sentence added to expand on verification requirements if a device has been repaired. SWGDE voted to publish as an Approved document (Version 1.0).
1.0	2/21/2017	Formatted and published as Approved Version 1.0.
2.0 DRAFT	1/10/2023	Five-year document review with updates. Submitted to SWGDE for vote to release as a Draft for Public Comment.
2.0 DRAFT	3/31/2023	SWGDE voted to release as a Draft for Public Comment; formatted for release for public comment.
2.0	6/15/2023	No public comments received; forwarded for SWGDE membership vote to release as a Final Approved document.
2.0	7/14/2023	SWGDE membership voted to release as a Final Approved document pending minor editorial and formatting changes.
2.0	8/19/2025	Minor editorial and formatting changes based on SWGDE membership vote completed July 14, 2023. Updated to new template and formatted for release as a Final Approved Document.

Version: 2.0 (8/19/2025)