FRSC E3

Photocopy Identification

("trash marks") Definition: Dots or marks put there by photocopying. Unless it's cleaned, all marks will be the same. Cons= time consuming.

Transfer/Contact

(1 of 6 BPA Pattern Categories) -Recognizable image -Direction of movement -Swipe vs wipe

Whole (passive) Blood Drop

(2 of 6 BPA Pattern Categories) -Repositioning of objects -Blood trails

Drip (blood-into-blood)

(3 of 6 BPA Pattern Categories) -Created by individual blood volumes impacting an existing blood *pool*. -Generally consists of a central blood pool surrounded by *satellite* stains. -Satellite stains are usually circular and heavy in appearance. -Can present on a vertical surface only classically on the sides of shoes.

Cast-Off

(BPA Pattern Category) -Generally denotes blood flung from an object (*Arc Cast-Off*) -*Cessation Cast-Off* (Stop-Action Cast-Off) -Characterized by its linear (in-line) stain formation. -May be used w/ caution to estimate a minimum number of blows administered.

Limitations to Pattern Recognition

(BPA) -Environmental factors (temperature, humidity) -Post-event artifacts (medical intervention, animal/insect activity, civilian/first responder activity, perpetrator activity) -Quality of scene information (photographs, measurements, control of scene) -Ancillary information (medical and/or autopsy reports, lab reports, individual statements, press reports)

Documentation

(BPA) -Narrative (what you're seeing) -Imaging (emulsion photography, digital) -Diagrams and/or sketches (memory & demonstrative aids, 3D models)

Reconstructive Information

(BPA) -Position(s) of person and/or objects. -Sequence of events (movement, time intervals, # of blows, shots, etc) -Confirm or refute other investigative information (evaluate victim, suspect, and witness statements).

Collection

(BPA) Photograph before!! -use pattern information to target the stains to be sampled. -collect a sample sufficient to support lab testing and defense retesting if possible. -remember the value of the stain patterns on clothing.

Disorganized Offender

(Crime scene) -No pre-planning, impulsive, high risk to offender, evidence often recovered at scene, weapon of opportunity left at scene, results of offender youthfulness, mental illness, influence of drugs/alcohol.

Organized Offender

(Crime scene) -Reflects premeditation and planning, minimize risk to offender, little evidnece recovered at scene, weapon of choice is removed from the scene, result of offender's intelligence, criminal sophistication, & confidence.

Depersonalization

(Criminal Investigative Analysis Concepts) Definition: Ex. Pillow over head so they don't have to look at the face.

Undoing

(Criminal Investigative Analysis Concepts) Definition: Kind of an act of kindness after the murder.

Overkill

(Criminal Investigative Analysis Concepts) Definition: Mechanics to the homicide often far exceed what's necessary.

Staging

(Criminal Investigative Analysis Concepts) Definition: Scenes set-up to get you off track.

Archival Data

(Evidence Examination: Types of Evidence) Definition: Backups -External hard drives -DVDs

Active Data

(Evidence Examination: Types of Evidence) Definition: Data still being "seen" and tracked by the operating system. -Current Files/Directories -Metadata, Recycle Bin -Temporary Internet Files -Registry Files and Logs (encoded)

Latent Data

(Evidence Examination: Types of Evidence) Definition: Data that has been deleted or partially overwritten. -Deleted Files -Unallocated Clusters -Slack -Space Ex. Kind of like recording via VHS tapes, can still see some of the end if new one isn't as long.

Specialists

(Requested for Kosovo crime scenes) -Evidence recovery specialists, pathologists, and anthropologists.

Assessment (of evidence)

(Step 1 of 4; How Digital Evidence is processed) Definition: The digital evidence should be thoroughly assessed with respect to the scope of the case to determine the course of action. -Has to match what you're actually searching for. -Onsite considerations: looking for passwords based on the surroundings.

Acquisition (of evidence)

(Step 2 of 4; How Digital Evidence is processed) Definition: Digital evidence, by its very nature, is fragile and can be altered, damaged, or destroyed by improper handling or examination. For these reasons special precautions should be taken to preserve this type of evidence. Failure to do so may render it unusable or lead to an inaccurate conclusion. -Packaging, transport, and storage -Electromagnetic Interference -Prioritize the evidence

Examination (of evidence)

(Step 3 of 4; How Digital Evidence is processed) Definition: General forensic principles apply when examining digital evidence. Different types of cases and media may require different methods of examination. Persons conducting an examination of digital evidence should be trained for this purpose.

Documenting and Reporting

(Step 4 of 4; How Digital Evidence is processed) Definition: Examiner is responsible for completely and accurately reporting his or her findings and the results of the analysis of the digital evidence examination. Documentation is an ongoing process throughout the examination. It is important to accurately record the steps taken during the digital evidence examination.

Low-Velocity Impact Pattern

(Type of Impact Pattern) -Result from a force of approx. 5 ft/sec -Difficult to describe physically other than to specify "larger stains" than those of the other 2 categories.

High-Velocity Impact Pattern

(Type of Impact Pattern) -Result from a high-velocity force in excess of 100 ft/sec. -Predominantly "mist size" stains. Ex. Gunshot wounds, high-speed machinery, etc.

Medium-Velocity Impact Pattern

(Type of Impact Pattern) -Result from a medium-velocity force of b/w 5ft/sec & 25 ft/sec. -Predominating stain sizes of generally 1 to 4 mm in diameter. Ex. Beatings, stomping, etc.

Information gained

(from forensic entomolgy) -postmortem interval estimation -remains relocation -antemortem injury assessment -crime scene (habitat) characterization -toxicological analyses -sources of human DNA -abuse/neglect of children and the elderly

Victims

(of Amerithrax) -2 postal workers (Curseen Jr. & Morris Jr.) -Old lady (Lundgren) -Photo editor (Stevens) -Hospital worker (Nguyen) -17 others infected, more than 10,000 exposed

Investigation Focus

(of Amerithrax) -Knowledge (leading expert w/ Anthrax) -Access (RMR 1029, alone in lab) -Laboratory Experience (leading expert) -Motive (failing Anthrax vaccine program)

First Principles

(of BPA) -Size (individual stains & their force) -Shape (individual stains & their angle) -Distribution (all of the individual stains of a pattern, collectively, patterns with respect to one another, absence of staining where it is evident it should be).

Crime Scene(s)

*reflect behavior* -Because of these unique behavior patterns, the way one offender commits a crime, will often distinguish him/her from others committing the same type of offense.

Behavior

*reflects personality* -An individual's personality is reflected in their patterns of behavior; posture, speech, gestures, manner of dress, writing styles, habits, etc. -These patterns will usually remain consistent, whether it concerns their usual everyday activities, or committing a rape and murder.

Paper Edge Matches

-Can ID individuals via fracture match or perforations.

Forensic Facial Imaging

-Composite drawings, 2d and 3d facial reconstruction from skeletal remains, facial age progressions, postmortem drawings, digital photographic retouches. STEPS: Skull examined by FA, skin depth markers added & photos taken, sheet of matte acetate is positioned over the photo, artist applies their knowledge of facial structure and musculature along w/ info gathered from the scene to render the drawing.

Request Specimens

-Consider: paper quality, paper size, writing instrument. -Look for disguise; compare with signature, non-uniform appearance. -General handwriting form; multiple names, numbers, words. -Verbatim specimens; repeat evidence, letter heights, and baseline habits. It' generally recommended that 15-20 verbatim request specimens be taken.

GSR (Gunshot Residue)

-Further distance from victim, larger spread on victim's clothing.

BPA Data

-Identified bloodstain patterns/stains. -Stain measurements (diameter & angle of the impact) -Calculations (area of convergence & area of origin, has to do w/ impact stains) -Testing (microscopy & Amylase) -Experimentation (hypothesis testing/pattern evaluation & models) -Ancillary case fact (reports & individual statements, puts it into context)

Asian (/Native American)

-Intermediate nose (come for Asiatic populations), small nasal spine, intermediate profile, projecting cheeks, simple sutures, slightly flared gonial angle.

Dating Documents

-It is difficult to date to a specific time. It is more likely that a document can be bracketed b/w dates of possible production. Ex. Lift-off correction ribbon became commercially available in 1973, anything before that would be incorrect. -Paper manufacturers may incorporate a date code which will indicate the earliest date of production of a particular watermarked sheet of paper. Can use watermarks if good quality.

Geographic Factors

-Location where victim approached. -Location(s) of crime scenes. -Body disposal location. -In serial cases, distance b/w offenses.

White (/European)

-Narrow high nose (usually the clearest sign; adaptive mechanisms to cold climates), sharp nasal spine, flat profile, retreating cheeks, simple sutures, flared gonial angle.

BTK Serial Killer (1974-1991)

-One of the earliest crime cracks using Digital Evidence.

Kosovo Crime Scene(s)

-People were in graves up to 5 months; unrecognizable. -Did autopsies in fields (>90% were gunshot to head). -DNA, fingerprints, frsc odontology; all of this requires records pre-death (which they did not have). Only means of IDing was something on the body.

4 Major Classes of Bullets

-Plain lead -Partially jacketed lead -Fully jacketed lead -Non lead (bronze, plastics, wax; "exotics")

Projected (Gush) Pattern

-Relatively *large* amounts of blood. -Released under forceful pressure. -Associated w/ traumatic bleeding from vessels under high pressure (arteries). -Differs on in initial release conditions from splash pattern.

Splashed Pattern

-Relatively *large* amounts of blood. -Released under the influence of gravity. -Behaves as a discrete volume. -Associated w/ traumatic bleeding from vessels under low pressure (veins). -Differs only in volume from passive drop stains.

Impact

-Results from the application of a force to an existing blood source. -The applied force disperses a portion of the existing blood volume into numerous droplets that strike and stain neighboring surfaces. -Generally, the greater the force, the smaller the resultant droplets and the further away they are dispersed. (The greater the force, the greater the number and wider the distribution of the resultant stains. The greater the force, the smaller the predominating stain size). -Generally categorized based on either the velocity of the causative action or the predominating size of the resultant stains.

Temporal Factors

-Time of day the crime was committed; may provide insight into the lifestyle and occupation of the offender. -Time spent w/ victim. -In serial cases, time b/w offenses

Transfer/Contact Pattern

-Transfer of blood from one object to another as the results of contact. -Recognizable image and/or motion may be captured.

Black (/African)

-Wide short nose (mechanism to cool the air before it hits lungs), small nasal spine, projecting profile, retreating cheeks, complex sutures, unflared gonial angle.

VIS (Visual Information Specialist)

-Works w/ the frsc anthropologist to create image of skull.

Internal, External, Terminal

3 types of ballistcs. I: Inside gun E: Once bullet leaves & travels in its flight T: Once the bullet hits an item

Child Age

Bones are used to estimate age? - based on development and deterioration; long bones, teeth, epiphyseal union.

Oviposition

Definition: (egg laying) occurs in natural body openings and wound sites. -Sense the gases, look for moist, damp places to lay eggs. -Can be intensive when conditions are favorable.

Non-Suitable Cases

Definition: A behavioral profile may NOT be useful in some cases such as drive-by shootings, school shootings, because we need repeated crimes to generate a profile.

Suitable Cases

Definition: A behavioral profile may be useful in some cases such as considerable victim/perpetrator interaction, perpetrator displays abnormal behavior, scenes w/ discernible patterns (serial homicides, child abductions/murders, serial arsons, series of rapes, threat communications, ritualistic crimes).

Behavioral Characteristics

Definition: A criminal profile is an assessment of ________ _________ of an unknown offender.

Barrel

Definition: A tool that leaves striated toolmarks on a fired bullet.

Cryptanalyst

Definition: An elite team of highly trained commandos engaged in a never-ending high stakes battle of wits b/w FBI codebreakers and criminal codemakers. Ex. Brian Patrick Regan- Espionage Investigation

External Ballistics

Definition: Barrel spin reduces drag and increases the stability of the projectile through air. Projectiles w/o barrel spin will tumble end over end.

Forensic Entomology

Definition: Based on the analysis of insects and other invertebrates sequentially colonizing a corpse as decomposition progresses, and on the developmental stages of their offspring.

Age Progression

Definition: Can be valuable aid to law enforcement when attempting to locate a fugitive or missing person.

Auricular Surface Degeneration

Definition: Changes in the morphology of the auricular surface can be used to determine age at death. More difficult to learn than the pubic symphysis aging method. (Sacrum connects w/ Ilium)

Criminal Profiles

Definition: Crime scenes may reflect the behavioral patterns of an offender, which are also known as what?

85%

Definition: Decomposers can consume how much of remains?

Offender Risk Level

Definition: Degree to which the offender places himself in jeopardy in order to commit the criminal act. -Low vs. High risk

Mummification

Definition: Dehydration of organs and tissues, drying and shriveling of remains. Results in preservation of remains. Requirements- Dry conditions (hot or cold)

Grooves

Definition: Depressed areas on bullets. -CLASS characteristics.

Griess Test

Definition: Detects presence of Nitrite residue.

Sodium Rhozidonate Test

Definition: Detects presence of lead residues.

Search and Analyze

Definition: Digital Forensics is what kind of method?

Vertical Flow

Definition: Downward flow of blood spatter on a vertical surface.

Microbial Forensics (Genomics)

Definition: Evidence that was used to solve the case of the 2001 Anthrax attacks & identify the perpetrator.

Handwriting and Hand Printing Examinations

Definition: Examinations may include: the physical exam of the document, a side by side comparison with known writing to establish identity or non-identity. -Also need to look @ the physical condition. -3 conclusions: Identification, elimination, or inconclusive.

Internal Ballistics

Definition: Grooves in the barrel of the firearm called rifling cause the bullet to spin as it moves through the barrel.

Non-Request Specimens

Definition: Handwriting samples that are taken from the subjects day-to-day activities. -Thing to consider: Contemporaneous (handwriting changes over time, need to be close in date). Comparable. How much? Ex. Cancelled checks, signature of DL.

Signature

Definition: Has tendency to be consistent behavior, beyond what's necessary to commit the crime, requires more time w/ the victim.

Facial Skin Depth

Definition: Helps determine where the skin would be placed.

Imaged Copy

Definition: Important to use this rather than an original copy in Digital Forensics because the original can get altered.

Rifling

Definition: Inside grooves in barrel of firearm that cause a bullet to spin (accuracy, velocity).

Photocopied Writing

Definition: Is NOT suitable for a meaningful handwriting examination. It may not represent an accurate depiction of the original. -Can sometimes be lighter or darker, you HAVE to have the original. Line quality is a crucial consideration.

Inhalation/Gastrointestinal

Definition: Most fatal route of Anthrax infections.

NIBIN

Definition: Name of the firearms and toolmarks database (firearms are a type of tool).

Odor

Definition: Necrophagous insects are attracted by ____.

Saponification

Definition: Occurs w/ moisture & high pH, hydrolysis of fat tissue, "grave wax" preserves. Will become similar to being wrapped in a boar of soap, enclosed in Adipocere. Requirements- Moisture, anaerobic environment, high pH.

Male

Definition: Parts of the body that are used in the sex determination of skeletal remains. -Browridges, Nuchal area, mastoids (larger, more pronounced)

Female

Definition: Parts of the body that are used in the sex determination of skeletal remains. -Pelvis; anatomical function (childbirth) and musculature.

Sex

Definition: Pelvis and skull are bones used in ADULT determination of what?

Souvenir (/Trophy)

Definition: Personal item take from the victim (ex. Jewelry, clothing, photos, etc.) -Enables the offender to relive the crime. -Kept by the offender or given to a significant other person. -May be returned by the offender to the crime scene or grave site. -Particularly in serial offense cases.

Criminal Investigative Analysis

Definition: Process of reviewing a case from a law enforcement/behavioral perspective. Generally provided in cases that exhibit criminal behavior which is beyond the normal life experiences of investigators and/or prosecutors. -Includes information regarding victimology, crime scene reports, autopsy, evidence, media coverage, profile.

Composite Drawing

Definition: Produced by combining various individual facial features described by a crime victim or witness into one unified image.

Firearm

Definition: Projects single or multiple projectiles at high velocity through a controlled explosion.

Lands

Definition: Raised areas on a bullets. -CLASS characteristics.

ICTY (International Criminal Tribunal for the former Yugoslavia)

Definition: Requested FBI forensic assistance in collecting and examining evidence from sites of mass murders and mass graves. -Great Britain, Italy, Canada, and Australia helped, too.

Wipe Transfer/Contact

Definition: Result of a non-bloody object contacting a blood surface.

Swipe Transfer (/Contact)

Definition: Result of bloody object contacting a non-bloody surface.

Digitally Manipulated Writing

Definition: Scanning into a computer, then comparing the 2. Going to lose some of the line qualities.

M.O. (Modus Operandi)

Definition: Set of actions required to commit the crime. Can change w/ time.

Minim

Definition: Short stroke in handwriting.

Stature

Definition: Someone's height, determined by long bones.

Ballistics

Definition: Study of a projectile in flight.

Entomotoxicology

Definition: The detection of drugs, toxins, and poisons from necrophagous insects.

BPA (Bloodstain Pattern Analysis)

Definition: The forensic discipline that seeks to use the physical appearance and spatial distributions of bloodstains for the purpose of establishing the event(s) that led to their deposition. -Bloodstain patterns are reproducible under separate sets of similar circumstances. -Blood is a fluid and once outside the body obeys certain predicable physical laws.

Ancestry

Definition: The hardest to determine w/ skeletal remains. -Asian, African, European (usually look @ skull, not very accurate).

Comparison Microscope

Definition: The most valuable piece of equipment used by Firearms Examiners in comparative analysis. -2 stages in the same view. -INDIVIDUAL characteristics using a breech face.

GRC (General Rifling Characteristics)

Definition: The number, width, and direction of twist of the rifling grooves in a barrel of a given caliber firearm.

Putrefaction

Definition: The progressive, natural recycling of biological materials. -NOT our friend, very destructive.

Pubic Symphysis Degeneration

Definition: The surface morphology of the pubic symphysis changes with age (30s). -Where they meet, cartilage begins to breakdown. Becomes more scooped-out, less defined. NOT an accurate indicator.

ESDA (ElectroStatic Detection Apparatus)

Definition: Used to develop *indented impressions* on documents. -Uses electrical current, works of of "opposites attract." Indentations in paper have a positive charge, machine causes negative.

VSC (Video Spectral Comparator)

Definition: Utilizes ALS to reveal differences in reflective properties. Enhances latent images/writing. Ex. Used for retrieval of obliterated writing as long as it has 2 different types of ink.

Tracing

Definition: When an individual actually copies another's writing using it as a model.

Simulation

Definition: When an individual attempts to imitate or draw another's signature.

Criminal Profilers

Do NOT testify in court. Their purpose is to... -Help investigators narrow the list of suspects. -Focus the investigation on the type of offender that may have committed the crime. -Suggest investigative strategies. -Provide investigators with the types of items that may be in the possession of the offender.

Initial Colonization

Forensic Entomologists DO NOT measure time since death... -They actually estimate the time of _______ insect (fly) ___________.

Kosovo

Serbia wanted to get rid of Albanians. -Of the 2 million here, 90% were killed or left to avoid being killed (late 1990's). -Totally self-sufficient, 64 person team, 95,000 lbs of equipment, satellite communications, 3 hummers 3 trucks & 5 trailers, food water fuel & shelter, security.

Fusion

The human skull is made up of 44 separate bony elements at birth, but only 8 as an adult.

Determined from Handwriting

Traits that cannot be ________ ____ _________. Ex. Age, sex, race, education, physical ability/disability. *Graphologist* = NOT real

5 Key Facts

_ ___ ____ you should know about Digital Evidence. 1. Many types of crime involve digital evidence. 2. Every crime scene is a digital evidence crime scene. 3. Digital evidence can be fragile. 4. Digital evidence can be easily altered. 5. Never assume digital evidence is destroyed.