Digital and Multimedia Evidence (Digital Forensics) as a Forensic Science Discipline

The Scientific Working Group on Digital Evidence (SWGDE) recently concluded its June 2014 meeting. The following eight draft documents were approved to be posted on the SWGDE website in order to solicit feedback from the Digital & Multimedia Evidence community:

Digital and Multimedia Evidence as a Forensic Science Discipline V2-0
The purpose of this paper is to provide an abstract to assist the reader in understanding that digital forensics is a forensic science and to address confusion about the dual nature of the application of digital forensics techniques as both a forensic science and as an investigatory tool.

SWGDE Best Practices for Handling Damaged Hard Drives
The purpose of this document is to describe the best practices for handling magnetic media hard drives when the data cannot be accessed normally.

SWGDE Recommended Guidelines for Validation Testing V2-0
This paper discusses the importance of validation testing and introduces a validation methodology.

SWGDE Best Practices for Computer Forensics V3-1
The purpose of this document is to describe the best practices for collecting, acquiring, analyzing and documenting the data found in computer forensic examinations.

SWGDE Capture of Live Systems V2-0
The purpose of this document is to provide guidance to the forensic community on acquiring data from live computer systems.

SWGDE Focused Collection and Examination of Digital Evidence
The purpose of this document is to provide the examiner with considerations to address when dealing with the review of large amounts of data and/or numerous devices.

SWGDE Mac OS X Tech Notes V2
The scope of this document is to describe the procedures for imaging and analyzing Macintosh computers. This document is restricted to the OS X operating system.

SWGDE Best Practices for Forensic Audio v2.15
The purpose of this document is to provide forensic audio practitioners recommendations for the handling and examination of forensic audio evidence in order to successfully introduce such evidence in a court of law.