Intro to Forensics

exam 4

Questioned Document Unit Examinations

Forensic analyses of physical documents, including handwriting, hand printing, obliterations, alterations, indented writing, watermarks, torn edge matches, plastic bags, typewriting, and machine copies.

Methodology of Handwriting Comparison

A physical examination of the document followed by a side-by-side comparison of questioned writing with known standards to establish identity or non-identity.

Simulation vs. Tracing

Simulation involves attempting to imitate or draw another person's signature freehand, whereas tracing involves copying writing directly using the original model as a physical guide.

Non-Request Specimens

Spontaneous handwriting samples gathered from a subject's routine, day-to-day activities rather than created specifically for an investigation.

Three Considerations for Collecting Non-Request Specimens

1. Contemporaneous: Produced around the same time as the questioned document.\n2. Comparable: Containing similar words, letter combinations, and writing style.\n3. Amount: Obtaining sufficient quantity to assess natural variation.

Request Specimens

Handwriting samples dictated to a subject specifically for examination, requiring control over paper quality, writing instrument, and monitoring for deliberate disguise.

Verbatim Specimens

Dictated request samples repeating the exact wording and layout of the questioned document to evaluate baseline habits and letter heights (typically $15\text{–}20$ repetitions).

Graphology

The pseudoscience attempting to discern character, personality, intent, age, sex, race, or physical capability from handwriting—traits forensic document analysis cannot scientifically establish.

Forensic Limitation of Photocopied Handwriting

Photocopied writing is generally unsuitable for definitive comparison because it lacks fine stroke details, pen pressure variations, and accurate line quality present in the original.

Indented Writing

Depressions or impressions transferred onto underlying sheets of paper beneath the page where the original text was inscribed.

Electrostatic Detection Apparatus (ESDA)

An instrument used to reveal indented writing by charging the document electrostatically to image microscopic surface fiber deformations.

Document Dating Feasibility

Determining an exact year of creation is generally not possible; examiners instead bracket the document within an estimated range of production dates based on materials and technology.

Trash Marks

Unintended specks, smudges, or scratches transferring from a photocopier or scanner glass whose unique spatial configuration can identify a specific source machine.

Fracture Matching

The physical realignment of two or more severed items (such as torn paper, dollar bills, or plastic bag seams) along unique edges to prove they once formed a continuous whole.

Video Spectral Comparator (VSC)

An instrument using alternate light sources across various spectra to detect differences in the optical reflectance, absorption, and fluorescence of inks and paper fibers.

Requirement for Visualizing Obliterated Writing via VSC

The chemical and optical properties of the original writing ink must be different from those of the obliterating ink.

Forensic Anthropology

The application of principles, theories, and methods from biological anthropology to medicolegal death investigations to identify remains, determine cause of death, and estimate time since deposition.

Types of Remains Handled by Forensic Anthropologists

Investigations involving fragmented, burned, badly decomposed, skeletonized, or commingled remains (multiple bodies).

Scope of Forensic Anthropological Determinations

Confirming human versus non-human origin, establishing a biological profile (sex, age, living stature, ancestry), identifying individualizing pathologies/trauma, and estimating post-mortem interval.

Four Factors Influencing Bone Size and Shape

1. Genetics

2. Nutrition

3. Biomechanics (mechanical load and physical activity)

4. Pathology (disease, trauma, or nutritional deficiencies)

Accuracy of Skeletal Aging: Children vs. Adults

Children can be aged more accurately than adults because skeletal growth, dental eruption, and developmental milestones occur in predictable, chronologically ordered sequences.

Skeletal Indicators for Estimating Subadult Age

• Dental eruption patterns: Reliable up to approximately $12\text{ years}$ of age.

• Long bone measurements: Reliable up to approximately $10\text{ years}$ of age.

• Epiphyseal union: Reliable up to approximately $23\text{ years}$ of age.

Dental Eruption

The chronological developmental process during which teeth form and emerge through the soft tissue and alveolar bone to become visible in the dental arch.

Epiphyseal Union

The developmental fusion of the growth ends of a long bone (epiphyses) with the primary shaft (diaphysis) once bone elongation is complete.

Pubic Symphysis Examination

The analysis of the progressive morphological and degenerative changes on the symphyseal face of the pubic bone to estimate adult chronological age.

Cranial Sutures and Skeletal Aging

Fibrous joints connecting the plates of the skull that progressively obliterate and fuse across predictable age ranges, aiding in adult age determination.

Feasibility of Determining Exact Skeletal Age

False; skeletal aging yields an estimated age range rather than an exact chronological year due to natural biological variation, health, and environmental factors.

Key Biological Profile Traits Determined from the Skull

Age, sex, and ancestry.

Most Reliable Skeletal Element for Sex Determination

The pubic bone (pelvis), which demonstrates the most marked sexual dimorphism due to functional adaptations for childbirth.

Stature

The natural standing height of an individual in life, estimated mathematically from skeletal elements.

Bones Measured for Stature Estimation

Long bones (such as the femur, tibia, fibula, and humerus), as well as metatarsals and metacarpals.

Least Accurate Biological Profile Component

Ancestry, due to continuous human biological variation, historical gene flow, and the absence of discrete geographic boundaries.

Most Reliable Skeletal Features for Assessing Ancestry

Morphological traits and metric measurements of the skull (craniofacial skeleton) and dentition.

Five Key Facts of Digital Forensics

1. Many types of crimes involve digital evidence.

2. Every crime scene can be treated as a digital evidence crime scene.

3. Digital evidence is inherently fragile.

4. Digital evidence can be easily altered or contaminated.

5. Investigators must never assume digital evidence is permanently destroyed.

Common Sources of Digital Forensic Evidence

Electronic devices and digital storage hardware, including smartphones, desktop and laptop computers, flash drives, solid-state drives, and memory cards.

Three Criminal Uses of Digital Devices

1. Target of a crime: The system, computer, or network being attacked or compromised.

2. Instrument of a crime: The device or software actively utilized to commit an offense.

3. Repository of evidence: A storage medium containing data, files, or logs documenting criminal actions.

Four Stages of Digital Evidence Processing

1. Assessment: Evaluating the physical scene, scope of devices, and potential digital evidence present.

2. Acquisition: Safely collecting, preserving, and bit-stream copying target media without altering original data.

3. Examination: Extracting, searching, and analyzing active, hidden, and ambient digital files.

4. Documenting and Reporting: Producing a comprehensive, objective, and auditable accounting of procedures and findings.

Forensic Duplicate

An exact, bit-by-bit physical copy (image) of an original digital storage medium that allows examiners to analyze data without modifying or damaging the original source evidence.

Hash Values in Digital Forensics

Unique alphanumeric strings generated by cryptographic algorithms to mathematically verify data integrity and prove that a forensic duplicate is an identical, unaltered match to the original media.

Active Data

Current, readily visible files, directories, operating system data, and metadata actively utilized and easily accessed through standard computer operations.

Latent Data

Hidden, deleted, or volatile information not readily accessible via standard operating systems, including deleted file remnants, spool files, and data in random-access memory (RAM).

Ambient Data

Data remnants residing in non-traditional storage locations on a drive, particularly within unallocated disk clusters and file slack space.

Archival Data

Long-term backup copies of files and databases stored off the primary active system, such as on external optical media, backup tapes, network servers, or cloud repositories.

Steganography

The practice of concealing a secret message, code, or payload inside an otherwise innocuous digital carrier file, such as an image, audio clip, or PDF document.

Essential Sections of a Digital Forensic Examiner's Report

• Summary of Findings: A clear, concise high-level overview of key conclusions.

• Details of Findings: Exhaustive technical documentation of evidence, locations, and methods.

• Supporting Materials: Chain of custody logs, hardware specs, tool validations, and exhibits.

• Glossary of Terms: Non-technical definitions of computer and forensic terminology for legal and lay audiences.

Annual Financial Loss and Recovery Rate for Art Theft

An estimated \\approx \4\text{ to } \$8\text{ billion}$ is lost annually to art theft worldwide, with a typical recovery rate of less than $10\%$.

Top Three FBI Criminal Markets

Drugs, weapons, and art.

Eight Factors Making the Art World Susceptible to Crime

1. High mobility\n2. Lack of transparency\n3. Fragmented history\n4. Unverified funds\n5. Reliance on trust\n6. Subjective value\n7. Judicial complexity\n8. Reputation and shame

Four Main Categories of Art Crime ("Four Horsemen")

1. Money laundering and fraud\n2. Trafficking and destruction\n3. Theft and heists\n4. Forgery

Legal Classification of Deliberate Cultural Heritage Destruction

The intentional destruction of cultural or religious heritage is formally classified under international law as a war crime.

Isabella Stewart Gardner Museum Art Heist

The largest property crime and art heist in U.S. history (March $1990$), in which two disguised intruders spent $80\text{ minutes}$ stealing $13$ works valued at over $\\approx \$500\text{ million}$; the crime remains unsolved with an active $\\approx \$10\text{ million}$ reward.

Mark Hofmann Forgery Techniques

Salvaged blank endpapers from authentic 19th-century books, formulated chemically aged iron gall inks, practiced precise imitation of historical figures' handwriting, and used chemical treatments to artificially simulate aging.

Motive for the 1985 Salt Lake City Bombings (Mark Hofmann)

Hofmann constructed pipe bombs to kill associates and investors in order to eliminate witnesses, buy time, and prevent the imminent exposure of his fraudulent document scheme.

Uncovering of Mark Hofmann's Counterfeiting and Bombing Scheme

His crimes were exposed after a third pipe bomb prematurely detonated inside his own sports car, severely injuring him and directing forensic and law enforcement investigations directly to his workshop and forged documents.

Han van Meegeren Forgery Scandal

A Dutch painter who forged works by Johannes Vermeer to deceive hostile art critics; after selling a forgery to Nazi Reichsmarschall Hermann Göring, he escaped treason charges post-war by publicly demonstrating his technique and painting a forged Vermeer in court.

Disciplines Involved in Art Crime Investigations

Forensic chemistry, materials science, DNA analysis, trace evidence, anthropology, forensic accounting, legal and judicial frameworks, organized crime/counter-terrorism intelligence, and international relations.

Four Primary Functions of a Forensic Artist

1. Composite sketches\n2. Age progression\n3. Court demonstratives\n4. Facial reconstruction

Qualifications for a Forensic Artist

A strong foundational background in fine arts, specialized instruction in human anatomy and forensic composite techniques, and practical experience collaborating with law enforcement agencies.

Applications of Digital Spheres and Game Design in Forensic Science

Designing immersive, cost-effective virtual simulations and 3D interactive environments for training crime scene technicians, tactical law enforcement, secret service personnel, and drone operators.