RECOVERY OF MATERIAL AND SCENE INVESTIGATION Beveridge Chapter 5 TEAM APPROACH TO INVESTIGATION SCENE TO LABORATORY  Involves personal highly experienced in post-blast investigation  Starts on the scene  Moves to the lab  Team approach INCIDENT RESPONSE PLANNING  Steps are the same – resources required varies  Depends greatly on the size of the scene  World Trade center bombing (1993)  Pan Am 103 bombing (1988) RESPONSE TEAMS  Instant mobilization of resources  Bureau of Alcohol Tobacco, Firearms, and Explosives (ATF)  Primary jurisdiction for all bombings  10 special agents, chemist, explosives technician, and supervisor  FBI  Similar to ATF team  Assist local authorities by providing expertise FIELD-PORTABLE EXPLOSIVE DETECTION  Debris vs instruments  Using detectors designed from aviation security (Chapter 3)  IMS  Canine Detectors  Raman spectrophotometers TWA 800  July 1996, France to London  Ocean off long Island, NY  Inland hanger  Collection and crime scene site  Screening laboratory  ATF and FBRI  Found 3 explosive types in multiple locations  Actually fuel/air explosion in the fuel tank INITIAL EVALUATION OF INCIDENT  Media reports  Less is more approach  One team member to assess QUESTIONS BEFORE LEAVING FOR SCENE Insert from page 125 QUESTIONS ABOUT POSSIBLE ACCIDENTAL CAUSE Inset from page 126 QUESTIONS ON SITE Insert from page 126 HAZARDS  Chemical  Biological  Physical  Secondary devices TYPES OF RESPONSE LIVE EXPLOSIVE DEVICES  Rendering safe  Deactivate  Detonation  Preserve as much evidence without impairing safety  Depends on device, placement of device  Communication is key POST-BLAST  Initial observations  Systematic observation and evaluation  “Walk through”  Insert questions from page 129 DAMAGE ASSESSMENT  Preliminary identification of explosive used  Plays a roll in direction the investigation takes  Provide investigative leads  Focus on effects of explosive  Pressure  Heat  Fragmentation LOW EXPLOSIVE DAMAGE  Deflagration  Remnants of a container  Damage – minimal and highly localized  Fragmentation damage from flying pieces of container  Impact damage  Pressure effects only in immediate vicinity HIGH EXPLOSIVE DAMAGE  Great deal more blast pressure than low explosives  Brisance – shattering effect  Crater at seat of explosion CONTAMINATION ISSUES AVOIDING CONTAMINATION  Common sense  Procedures and standards that everything used was “demonstrably free of explosives”  Testimony, analytical data  Disposable items GROSS VS. TRACE Gross Contamination  Handling bulk explosives  Search warrants  Explosive range works  When detonating a pre-blast device  Firearms ranges Trace Contamination  Bombing scene  Some search warrants  Transfer from object to personal MODES OF CONTAMINATION  Cross-scene  Residue transferred form one scene to another  Explosive range to scene  Blast scene to search warrant location  Random  Smokeless powder from weapons or range  Contaminated clothes, tools, or vehicles  Cross Case  Improper storage or packaging PREVENTION OF CONTAMINATION  Cross-scene  Changing out materials used at each scene  Coveralls – only used at once scene  Decontamination between scenes  Random  Hardest to prevent  Cross Case  Properly store all case material  Work on one case at a time  Protocols to clean workstations between cases LOW EXPLOSIVES VS HIGH EXPLOSIVES Low Explosives  Contamination easier to deal with  Fragments from device contain residue  Especially cautious in creating a barrier between fragments and other evidence High Explosives  Sheer volume of evidence that could have residue POST BLAST RESIDUE COLLECTION GOAL  Collect unconsumed explosive material  Means and manor depends on the explosive used  Important to hypothesize this prior to collection (damage)  Some remain:  Oils like NG – up to 5 years  Particulates – indefinite if not physically removed  Related to explosive and material it absorbed on LOW EXPLOSIVES  Due to deflagration some unburned material remains  Mainly particles  Due to confinement  Container pieces are the prime piece of evidence that may contain particles  Collection  Sweeping or vacuuming the blast seat HIGH EXPLOSIVES  Complex – require technical expertise  Variety of formulations  Most is consumed in explosion  Very very small trace quantities left  Unless detonation does not go as planned HIGH EXPLOSIVES- COLLECTION  Laboratory process  Vast crime scenes, dilution of residues – on site forensic chemist  Looking for:  Materials most likely to retain residues  Close to original charge  Non subjected to the thermal effects of the charge PRESERVATION  Vapor impermeable containers  Some explosives in the vapor phase  Do not want to lose material  Usually a metal paint can or ziplock bag DEVICE COMPONENTS BLAST DIAGNOSTICS  Assessment of blast effects  Affect materials near the blast  Include device components – explosion damaged material  Three primary effects: 1. Thermal 2. Fragmentation 3. Pressure – Brisance  Must perform a complete examination of the scene PIPE BOMBS – METAL EFFECTS  Minimal fragmentation  Observing the size of the pipe  Radius of damage  Can give indication of the explosive filler  Some thermal effects on the metal  “Blueing” of the metal – oxidation of the surface in high heat  Discuss further in Chap 11 THERMAL EFFECT ON OTHER MATERIALS  Fabrics and plastics are likely to show effects  Melting  Charring  Only materials adjacent to the source  Rapid heat VICTIM ACTIVITIES  Initiation of the blast (if victim triggered) INVESTIGATIVE EVIDENCE AND SIGNATURES  Recognizing what’s important  Signature  Definite design feature or choice of materials that would point to one person  Ted Kaczynski COMMERCIAL PRODUCTS  Used in devices  Databases  Serial numbers  Point of purchase  Production codes CLANDESTINE EXPLOSIVES Bomb factories MANUFACTURING OF IEDS CLANDESTINE LABS  Hazardous  Primary high explosives ON SITE INSTRUMENTS AND COLOR TESTS  Screening of possible explosive residues  Raman  FTIR  Wet chemical testing LITERATURE  Easy to find handbook  Terrorist magazines OTHER FORENSIC DISCIPLINES CHEMISTRY  Identifying the explosive  Raw materials  From the materials that were part of the device  Other chemical testing  DNA  Polymers – fibers, glues  Usually first step TOOL MARKS  Tools are often used to generate the device  Drill holes for fuses  Wrenches for tightening  Capable of surviving blast  Look for tools at the scene of manufacture DOCUMENT EXAMINATION  Letters FINGERPRINTS AND DNA  Thermal effects of blast destroys  Look for on pieces not thermally damaged  Survives on porous surfaces EVALUATION OF EVIDENCE CROSS CONTAMINATION  Chain of custody is most important  One case at a time  Some residues are persistent  Do not want to contaminate INITIAL EVALUATION  Establish priorities INVESTIGATIVE EVIDENCE  Sophistication of bomb maker  Similarity to other devices  Sources of components  Commercial or improvised ASSOCIATIVE EVIDENCE  Once suspect is identified switch from investigative to associative  Direct  Circumstantial COMMUNICATION IS CRITICAL  Laboratory task force  Relay information from the lab to investigative teams  Information flow  Scene, command centers, laboratory  Search warrants  Probable cause support  Early ID is key POST BLAST RESIDUES GENERAL GUIDELINES  No two cases are ever the same VEHICLE BORNE IEDS Beveridge Chapter 10 VBIED  Using a vehicle to transport large quantities of explosives to attack a target  Concealment  Different than IED in a vehicle https://www.youtube.com/watch?v=QufxuA21eCc VBIEDS IN US  Wall Street - September 16, 1920  Horse draw wagon packed with scrap metal and explosive  Outside JP Morgan  38 died; 400 injured  NYPD and Bureau of Investigations  Horseshoes, metal fragments, leather scraps, leaflet by “American Anarchist Fighters”  No one was prosecuted  Likely small group of Italian anarchists BATH CONSOLIDATED SCHOOL – MAY 1927  Kehoe set off boxes of World War I surplus explosives in basement of new school building (due to possible increase in his property taxes)  Showed up on scene with truck filled with more explosives  Killed 45  Failed detonation of 100 more kilos WISBOM – AUGUST 1970  University of Wisconsin Army Math Research Center  Killed one researcher  4 students opposing Vietnam war  Found information about construing the device from the school library WORLD TRADE CENTER - 1993  Rented van loaded with IE in underground garage  Killed 6  FBI found twisted metal with VIN of the van that was reported stolen  Uncovered network of terrorist trying to down one of the towers  Not large enough  Not positioned strategically to damage foundation  Noon attack prevented more deaths OKLAHOMA CITY - 1995  North entrance of the Murrah Federal Building  Killing 168, inuring hundreds  VIN from van  Timothy McVeigh, Terry Nichols, Michael Fortier CONSTRUCTION OF VBIED MAIN ELEMENTS  Explosives  Vehicle  Fuzing System EXPLOSIVES  Large quantity  High explosives  Greater energy kilo-for-kilo  Easier to manufacture in large quantities  Timothy McVeigh purchased from open-market suppliers  Fertilizer and nitromethane VEHICLE  Capacity  Vans and trucks  Hauling capacity with maneuverability  Target dictates the choice of vehicle FUZING SYSTEM  Means of initiation  Two types:  Suicide-initiating  Non-Suicide initiating  Shock-initiate the main charge  Usually use commercially available blasting caps DETONATION  Flame from burning fuse or electrical current from power source initiates the detonation  Primary high explosives are detonated producing a shockwave  Triggers rest of explosive material  Pressure waves, heat, fragmentation https://www.youtube.com/watch?v=Gzn04Lp19ng BUILDING DAMAGE  Pressure waves  Total or partial collapse  Oklahoma City  Rose up through building from a few meters away  “Progressive collapse” of upper floors CRATER FORMATION  Below the VBIED from pressure wave  Size gives no indication of amount or type of explosive  Too many variables  Type  Distance from the ground  Mass of vehicle between explosive and ground  Composition of surface and subsurface soil VICTIM DAMAGE  Pulmonary barotrauma “blast lung”  Most common fatal blast injury  Pressure wave compresses air in the lungs leading to air embolism  Can sometimes occur up to 48 hrs after explosion HEAT DAMAGE  Produces temperatures up to 3000C  Fireball emanating form point of detonation  Pushed by pressure waves  Spikes quickly and drops quickly  Singe not burn FRAGMENTATION DAMAGE  Fast movement of lethal objects  Primary – parts of the vehicle itself  Secondary – objects near the POD that are broken apart and propelled  Shrapnel – anything added to the IED before explosion RESPONSE TO VBIED IMMEDIATE AFTERMATH  Chaos and confusion  Full extent is an unknown  Accidental?  WTC 1993 – thought it was electrical transformer explosion  Once VBIED is determined cause:  Crime scene coordinator  Conduct and overall survey  Establish a perimeter and create a command post  Ensure crime scene safety  Gather resources CONDUCT OVERALL SURVEY  Scope of the scene  Best view from above  Photography  Provides a baseline prior to evidence collection  Splitting up the scene  News media PERIMETER AND COMMAND  How big does it need to be?  Approximately 2500 m diameter  Can be impossible in crowded urban area  Largest area that can be effectively secured  Command post  Far enough away from POD to be secure and manage  Close enough for direct supervision  Difficulties with logistical support CRIME SCENE SAFETY  Secondary devices are rare  Still a concern  Sweep area first  Other hazards RESOURCES  Personal  Supplies  Depends on the size of the blast TEAM APPROACH  Specializing in different types of evidence – thousands of pieces of potential evidence      General Evidence collection team Vehicle identification team Administrative/logistics team Hazardous environment team Forensic triage team EVIDENCE AT VBIED SCENE EVIDENCE COLLECTION  Zone approach  Logical process  What would you do? OUTERMOST POINT TO POD  Benefits of working from outer edge to point of detonation  Unsecure scene (scene is too large)  Once secured move toward POD  Measure size of crater  Use standard documentation HIGH-PRIORITY ITEMS  Initial focus  Trace explosive residues  Vehicle fragments  Parts of initiation system INTERIM STORAGE REQUIREMENTS  Where is it all going to go?  Near site at first  May have labs to screen  Send out more important sample CRIME SCENE TO LABORATORY  100s to thousands to specimens  Maintain chain of custody and separation  Small items  Larger items LABORATORY EXAMINATION  Items separated based on analysis method  Chemistry section  Fingerprints  Biological  Reports are generated for each individual piece  Tracking is important JURISDICTION OF VBIED UNITED STATES Federal  Bombing of US government property  Murder of federal law enforcement officers State  Murder of Oklahoma citizens MOTIVE  Can often determine who has jurisdiction  Terrorism  Federal crime will be prosecuted first INVESTIGATION OF PIPE BOMBS Beveridge Chapter 11 “CLASSICAL” PIPE BOMB  Steel pipe with threaded cast iron end caps  PVC, ABS, and copper also used  Usually low explosives (need container)  Designed to kill or injure persons COMPONENTS OF EVIDENCE  Container  Initiator  Explosive  Unexploded can also be good source of physical evidence PIPE CLASSIFICATION Manufactured to a standard     Diameter Wall thickness Thread pitch (threads per inch) Even in exploded pipe  Retail origin  Stampings  Stickers  stencils PIPE FRAGMENTATION  Low or high explosive  Smokeless powders  Depends on initiation SMOKELESS POWDERS  Flame or wire  90 degree breaks  Little to no residue  No corrosion  Detonator initiation  Double base – high explosive characteristics  45 degree fractures TOOL MARKS ON PIPES  Manufacturing process  Post-manufacturing manipulation  Tools used by the bomb maker  Drill holes  Initiators FINGERPRINTS  Aware of possible presence  Preservation  Demonstrated recovery using superglue fuming  Does not interfere with explosive residue DNA ANALYSIS  Can be recovered at reportable levels from post-blast pipe fragments  Touch or low copy number DNA  Prevention of contamination of pipe  Arson/explosive analysis first  DNA second SEQUENCE OF ANALYSIS  Residue usually on interior surface  If possible remove explosive evidence first  If extraction is necessary then:  Fingerprint  DNA  Chemical analysis PIPE BOMB INITIATION FLAME  Low explosive  Fuse lit  Moves flame into the device  Usually full of black powder  Hypergolic mixture  Chemicals that spontaneously light when mixed  Major hazard HOT WIRE  Glowing filament supplies the energy  Require a power source  Can initiate low explosives  Also initiate blasting caps  Primary high explosive charge to initiate high explosive BATTERIES  Typically survive a low explosive blast in tact  Destroyed by high explosive  Casings may be source of biological evidence TIMERS AND SWITCHES  Commercial electronic clocks  Cellular phones  Components are usually recoverable ADHESIVES AND TAPES  Used to attach elements of the fusing and firing system  Can be compared to material a suspect has  Source of biological evidence  Trace evidence as well LOW EXPLOSIVES ANALYSIS  Desired affect  Fits in pipe  Initiated to breach the pipe creating fragments  Some amount of unreacted material  Identification requires complex analytical chemistry UNREACTED MATERIAL MICROSCOPY  Stereo microscope  Homogenety  Morphology  Commercial products can be recognizable ANALYTICAL TECHNIQUES  Non-Destructive  Infrared and Raman Spectroscopy  SEM/EDX  Destructive      HPLC GC Spot tests Capillary Electrophoresis Mass Spectrometry SPOT TESTS CRIME SCENE – POST BLAST  Collect any material that has direct explosive damage  Send to lab for analysis  Avoid contamination  Debris in seat of explosion POST-BLAST BLACK POWDERS  Not as common as smokeless powders  Can be analyzed for physical appearance  Infrared spectroscopy BLACK POWDER RESIDUE  Pipe Damage  Breaks at the seam  Faceplates of end caps blow out  A lot of residue remains BLACK POWDER SUBSTITUTES BLACK POWDER SUBSTITUTES  Post blast damage is similar to black powder  Additives are often burned up  Hard to distinguish from black powder SMOKELESS POWDERS  Brand identification  Associative evidence  3 main chemical components     Nitrocellulose Nitroglycerine Nitroguanidine Additives APPEARANCE  Morphology  Single base  Double base MEASURING MORPHOLOGY  Shape  Disk, tube, ball  Measuring dimensions  length, diameter, thickness  Color  Then move onto chemical analysis of additives ISSUES WITH BRAND IDENTIFICATION  Change of suppliers  Wholesale may switch bulk product  Cross contamination when mixture is used  Some product are blends  Post-blast contamination GOALS OF ANALYSIS  Defining the material as an explosive substance  Determining the probable manufacturer or source  Comparing one powder to another  Some steps can be done at the scene  Chemical analysis is done with advanced analytical chemistry POST-BLAST EXAMINATION OF SP  Immediate area  Swept or vacuumed to recover  Pipe and container fragments examined  Undamaged grains – pipe threads  Usually damaged by heat – resembling yellowish-green, tan or black plastic  “Ghosting”  Like an impression/outline  May be able to determine grain shape and size IMPROVISED LOW EXPLOSIVES Commercial Products ROAD SAFETY FLARES  Non-explosive pyrotechnic devices  Contain pyrotechnic mixture ignited by a match  Strontium nitrate  Potassium perchlorate CHLORATES  Welding torches  Pressed mixture of sodium chlorate  If mixed with a fuel can function as an IED  Chlorate mixed with sugar  Component of exploding money dye packs  Damage to a pipe is similar to black powder MATCH HEADS  Contain chlorate/sulfur mixtures FIREWORKS  Contain chlorates  Whistling fireworks  Boston Marathon Bombing CALCIUM HYPOCHLORITE  Swimming pool chlorinators  Combined with organic fuels  Hypergolic mixture IMPROVISED LOW EXPLOSIVES Chemical Mixtures MIXTURES OF CHEMICALS  If contained in a pipe and initiated by flame  Explosive mixture  Oxidation/reduction reactions  Oxidizers  Chlorates, chlorites, hypochlorites, nitrates, perchlorates  Fuels  powdered aluminum, magnesium, charcoal, sugar, sulfur EXAMINATION AND ANALYSIS  Water soluble salts will be left behind rather than burned residue  Residue should be examined microscopically  Isotropic crystals  Environmental contamination  Salts are common in environments CHEMICAL REACTION BOMBS  Reaction produces a gas     Hydrochloric acid and aluminum Sodium hydroxide and aluminum Calcium hypochlorite and soft drinks Dry ice https://www.youtube.com/watch?v=nZHGK37jBp8  No source of ignition  Gas pressure “explodes” – physical explosion  Less damage than explosive mixtures HIGH EXPLOSIVES DIFFERENT APPROACH  Assumption a commercial detonator was used  Search for remains  Only residual traces of explosive  Commercial explosive  Peroxide explosive https://www.youtube.com/watch?v=R3l53oDD91M
Purchase answer to see full attachment