Tuesday, September 30, 2014

Trace Evidence: Proof of Our Everyday Interactions

Trace evidence is the term applied to evidence left behind when an interaction between the perpetrator of a crime and the crime scene. Often this type of evidence is not seen with the naked eye or is not the first thing noticed about the crime scene. Types of trace evidence include:
  • Fingerprints on a door frame
  • Saliva on the rim of a drinking glass
  • Strands of hair on a victims' clothing
  • Gun residue on the criminals' hands
  • Skin cells on lipstick
  • A strand of thread on a broken piece of glass.
Collecting trace evidence requires the investigator to examine the evidence with close scrutiny and often involves the use of a microscope. Depending on the type of evidence the investigator suspects to be present, they may also spray the surface with chemicals or use other extraction processes to reveal the evidence.

One extraction process that you commonly see on popular crime shows is the use of superglue fumes to reveal latent fingerprints. The fumes react to oils that are commonly on our skin and particles from the fumes bond to the oil and form a fingerprint. Another common method of collecting fingerprints is dusting with powder. Once the fingerprint is revealed, it is collected using special adhesive tape that allows the print to be preserved rather than damaged or destroyed during the collection process.

One of the most popular methods of revealing trace evidence that isn't seen by the naked eye is to spray an area with a Chemiluminescent substance, such as Luminol. The Chemiluminescent substance reacts with the hemoglobin in the blood and produces a distinct glow when viewed in the correct lighting conditions. This requires complete darkness in the room and the blood will not glow for long. The hemoglobin in the blood cannot be cleaned off with ordinary household cleaning products.

Trace evidence collection is achieved through the use of special vacuum equipment, cotton swabs and tweezers among other methods. In the lab evidence is examined through the use of special microscope equipment. This equipment reveals finer particles of evidence as well as specifics about the evidence. Through the use of microscopes, thin layer chromatography and infrared spectroscopy procedures examiners can determine the thread count of fabric, the size and color of a grain of powder and reveal clues as to the type of animal a strand of hair came from. There are kits available on the market to let you try your hand at finding trace evidence. A CSI Crime Scene Investigation Kit would be wonderful for your next crime solving party or just to test your skills as an aspiring forensic examiner.

Tuesday, September 23, 2014

Understanding Slack Space

To understand slack space you must first understand how a computer manages files. This is quite simple. When you create a file, such as a word document, your computer assigns it a place in the File Allocation Table (FAT), creates a directory entry and saves the file to a cluster on the hard drive. For now we will call the file "forensics.docx" and we are going to pretend the document was 3 pages long with approximately 900 words and 7100 characters. (Characters include each letter of a word and the spaces in between. They are basically each stroke of the keyboard that is recorded by the computer.)

To further simplify that it basically files the document away using the computers storage system. The equivalent of that in the real world is the same as a doctor's office labeling a manila folder with your name and a unique identifying number (this is like using the FAT on a computer) so they can find you easier when you return and then placing that file into their records room (this is like the hard drive). The directory in an office setting is the nurse's knowledge of the offices record keeping. For example, they may assign all the patients by birth date and an initial for their last name resulting in a number such as 19841201B. On a computer you would see the directory as something like "C://User/Documents/forensics.docx" while logged into your user account.

When you delete a document or send it to the recycle bin on newer Window's operating systems, the file is not actually deleted. The first letter of the file name is changed by the system and the FAT entry is voided to indicate that the file can be ignored. The document is still there in the same place, but it cannot be seen any longer because the computer is ignoring it.

Now you have a new document to save. Let's consider that you name the new document the exact same name as the original document. This forensics.docx is only two pages long and less than 600 words. The computer completes the same activities when you save it. However, it may not have saved the file in the exact same place as the original. (Going back to the doctor's office example, the files would not have the same birth date and therefore may not be in the same location.)

If by chance the computer does save the file to the exact same location, it would only save the new document over part of the old document because the new document is smaller and does not need as much space. This leaves the remaining 300+ words of space that the original document used still visible to forensic software. This additional space is called "slack space" and is one of the first places a computer forensics examiner would look.

Now, let's consider one more possibility. You want to make sure the document is deleted and that no evidence remains that you created it. So you open the document instead of using the delete button on your keyboard. You highlight all 900 words in the document and you press the backspace key. Then you paste in some other words and save the document using the original name. The document has changed, those words are no longer there and you think you've beaten the system. You haven't! Unless you replace all 900 words and 7100 characters, there will still be remnants of the old information still in your slack space.

Then there is also the possibility that once upon a time your computer shut down while you were working on the document and there is an auto save copy on the hard drive you didn't know existed. If you printed it, there is the copy of the file that was spooled for printing still on the hard drive. Your best option -- don't save incriminating documents on your hard drive in the first place. Electronic evidence is often harder to dispute than real life evidence in a court of law.

Tuesday, September 16, 2014

Legal Considerations for Moving Abroad

It's known but rarely thought of that the laws in other countries will be different from those of your home country. Much to the dismay of immigrants the world over, they arrive and live in the new country for long periods of time only to find out something that was common in their own culture will get them arrested, their children taken away or worse in their new country. A 2012 article spawned a significant debate among the immigrant and expat communities that highlights just how drastic some of the legal differences can be.

If you haven't seen it, the article is told from the perspective of two Indian parents who had their children taken away from them while they were living in Norway. In the article the parents mention that they were taken because the children were being hand fed and slept in the parent's bed. While I attempt to make no determination of their guilt or innocence, this highlighted a very real threat faced by individuals and parents who move abroad.

In this particular instance, let's first discuss the law in Norway. Under the Children Act: Chapter 5 Parental responsibility and where the child shall live permanently. Section 30 Meaning of parental responsibility. The child is entitled to care and consideration from those who have parental responsibility. These persons have the right and the duty to make decisions for the child in personal matters within the limits set by sections 31 and 33. Parental responsibility shall be exercised on the basis of the child's interests and needs.

Those who have parental responsibility are under obligation to bring up and maintain the child properly. They shall ensure that the child receives an education according to his or her ability and aptitude.

The child must not be subjected to violence or in any other way be treated so as to harm or endanger his or her mental or physical health. This shall also apply when violence is carried out in connection with upbringing of the child. Use of violence and frightening or annoying behavior or other inconsiderate conduct toward the child is prohibited.

Regarding the right to make decisions on behalf of the child in financial matters, the provisions of Act No. 3 of 22 April 1927 on Guardianship shall apply.

And further, this passage comes directly from a brochure provided by the Welfare Association: "Parental responsibility involves an obligation to care for the child. Parents must give their children love, safety and attention, care. Child care also involves the important task of stimulating and social contact. Parents are prohibited by law from using any form of violence (including light smacks and slaps) in connection with upbringing. Nor shall children be subjected to frightening or annoying behaviour or other inconsiderate conduct."

Both apply to this case. If you consider the details about there being absolutely no harm to the child physically or mentally, it is possible someone could have legitimately felt that the children were in danger. As we all know too well that some individuals are very easily offended and overreact even in safe environments all because of their own misunderstanding.

The article mentions that the welfare association was calling the feeding of the children by hand "force feeding." I think this throws up a red flag on both sides of the argument. Since neither of the children in the pictures appear to be morbidly obese or even just obese for that matter, it stands to reason that this scenario is likely being overplayed. Yes, parents can force-feed children but the reality is that doesn't mean the child will eat it, swallow it, or keep it down. There was no eating disorders mentioned in any of the online articles revolving around this story. Children are notoriously picky when it comes to food and it's more likely that maybe the child didn't like a food, mom made him eat it anyway for the health benefits and someone wasn't happy that she did it and turned them in. I think most of us have had similar experiences with foods like broccoli or spinach and mom insisted we eat it no matter how bad it tasted to us.

Feeding with the hands would be an absurd reason to remove children from a home from a legal standpoint and there is no indication in Norway law that says it is illegal to feed children in this manner. After all, you don't need a spoon for french fries or other finger foods and playing airplane can be quite an effective technique to lure a picky eater into eating.

Co-sleeping has long been controversial in many countries. Yes, it has the potential to be dangerous, but it is also scientifically proven to benefit babies as well. So this keeps most countries from banning the practice. Not to mention many cultures still practice this as a means of survival. Not every culture in the world has standard indoor heating during the winter months and body heat is crucial to life during harsh months. Co-sleeping is also not mentioned in Norway law as being considered detrimental to children. In my research I was unable to find any reference to other cases of children being removed from the home for co-sleeping

In Indian culture, both of these practices are common, everyday practices. Children sleep with their parents well into their teen years due to the limited space, comfort it provides the child, cultural and for many other reasons. So it would not been out of character for these parents to feed their child with the hands or allow them to sleep in the same room. These same behaviors, though not as common, occur in most of the countries in the world -- including the U.S. and UK. What child hasn't had a nightmare and ran from their own room to mom and dads when they can?

Regardless of what is happening to this specific couple, there are other immigrants facing the same dilemmas. There is no excuse for not knowing the law, and I doubt any country includes a disclaimer for ignorance of the law. It is important to research and understand how moving to a new country will require changes in your normal behavior. This includes downloading torrents, swatting babies on their diaper, making children stand in the corner, slapping an unruly suitor and more. No one wants to land themselves in jail abroad.

Tuesday, September 9, 2014

Top 10 Tips for How Not To Stand Out in the Crowd


Mobile surveillance is one of the most exciting parts of being a private investigator. You might be curious how to record evidence of a person while they are in a public place. Obviously you can't take your handy cam and follow them around but you can still follow them on foot and get some great footage using covert cameras. I won't get into these in this post but I will address some ways to watch your suspect/claimant while in plain sight without being burned.

Make sure you test your covert camera before you go on surveillance for the day. Make sure the camera fits the scene you're going to. You wouldn't want to take a cell phone into a gym and expect to get good video. It will stand out whereas an iPod or watch would not.

  1. Dress for the place you're going to be. I wouldn't walk around downtown D.C. in redneck camouflage for example. Do a little research if you're not familiar with the town and you'll have a good idea of how to dress. 
  2. Avoid wearing bright colors or trigger colors. Trigger colors are things like red, purple and yellow. While they can be common, they also tend to stand out more to people than colors like black, blue, white or dark green. 
  3. Stay with the crowd if there is one. One lone man sticks out much more than a crowd of people. If you can make it work without arousing suspicion, walk close enough to someone that it looks like you're with them. If you must walk alone, break out your cell phone and look like you're texting or making a phone call. These behaviors are ones that people tend not to want to watch. 
  4. Avoid physical contact with anyone. You don't want to accidentally bump into someone, have to say excuse me and risk your suspect/claimant hearing your voice and noticing you. So be careful of where you're walking. 
  5. In stores, stand just behind the shelves. Most of the time there is a gap you can see through and watch your suspect and no one will notice you. If anyone else walks by, pretend you're looking at whatever is on the shelf in front of you. It's sometimes helpful to hold an item in your hand and angle it so it looks like you're reading it when you're really watching your covert camera. 
  6. Walk at least 1 aisle away from your suspect/claimant when in the stores. They're not watching the gaps in the aisles to see if someone else is there, they're on a mission to find their products. Use that to your advantage and follow them without being in sight. 
  7. Keep your head up (unless pretending to text or look at products) and be confident that you know where you're going - even if you don't. You'll draw more attention if you look lost. Walk straight and at a steady pace. If you're at risk of losing your suspect/claimant, then speed up your walk only when you're not in the crowd. Trying to run over the crowd and get through them will get you noticed but walking fast while alone is completely normal. 
  8. Look in the direction of your suspect/claimant but never directly at their face. Making eye contact is one of the worst things you can do so try to look just behind them or beside them. If they look at you, shift your eyes as if they're in your way and you're trying to look around them. That will take the focus off of them suspecting you're watching them.
  9. Change your clothes between stops. If you follow someone to more than one store, change your clothes in between. If they saw you at the last store, they won't recognize you in a different outfit. If you're a girl, you can also put your hair up or take it down to really throw them off your trail. 
  10. Keep your emotions at bay. If something funny happens, laugh on the inside and only smile on the outside. It's best to laugh without sound if you can. Just don't let your voice stand out. If you stump your toe, hold it in. Making any noise could get you too much attention from your suspect/claimant.

Tuesday, September 2, 2014

Searching Court Records



I first got interested in becoming a private investigator years ago. I'm not sure exactly what led me to think this was the job for me but I know I was spending a considerable amount of time researching my families genealogy and as such, countless hours in courthouse record rooms.

Here in Virginia there are several types of records rooms. Each court is different. some have open access rooms in which you just walk in and never encounter a worker unless you want to. Others have rooms you must bypass the counter so they know you're there. A few I've been too had the books behind glass windows and you had to know what you were looking for and ask for it specifically.

Regardless of how you get to the indexes and records, there are many common elements in what you will find while searching.

Always start with the indexes. Not just one because then you'll be missing half of the information. Start with the index that has information you're certain about first. So if you were looking to find out who John Doe married in 1974, then you would pick up the index for grooms starting with the letter "D" and covering the year mentioned. Most indexes cover a span of several years.

As you go through the index, you'll notice the headings on the pages are listed 'Da-De' or in some similar fashion. Find the section that covers 'Do' and then scan all the listings. The list on the page will not be alphabetical but is listed by date. So if the page started in 1965, scan the date column until you find 1974.

It's important that if you don't find John Do in 1974 that you search subsequent years. Typos are a fact of human life and maybe he got married in 1973 or 1975. If I were searching and I didn't find him in the right year, I would scan the entire page by name. It takes only a few seconds and could produce the information you are looking for.

Once you find John Doe, make note of the line number his name is listed on. Most indexes span 2 pages and they are not always lined up perfectly. Then slide your finger along the line until you reach the end of that page. Where the book creases, look for the same line number on the second part of the page and continue sliding your finger along that line to see the rest of his information.

Typically in marriage registers you can find the names of the grooms and brides parents, birth dates, city and/or state of birth and age at time of marriage. Sometimes the officiating minister is also listed. Write all the information you find down in your notebook. Even the tiniest piece of data could be useful. Maybe the happy couple still attends the same church and you can find bulletins detailing more information of their lives.

When it comes to deeds you can find when the land was bought and sold and for how much. There should also be a plot number listed. When you have a plot number, you can look in the plat books. These are massive books, so be prepared for some heavy lifting if you need to see the boundaries of a property. Actually, most courthouse books are heavy but these are extra heavy and bulky.

Pay close attention to who bought and sold the land or how it was awarded. This could lead you to a will if the property changed hands from relative to relative. Or there could be evidence of laundering - hiding assets without losing them - via transference to a spouse or relative. These documents could also show that your suspect has more disposable income than they report to have. Deeds almost always list a lien holder if there is one. If there's not, then your suspect paid in full at the time of sale.

This isn't always a red flag. If he purchased the property from a government auction or foreclosure sale, financing may not have been an option or the price may have been low enough he could get it cheap. The answers are all in the details.

Why would you need to know this? There's a variety of reasons. Knowing how a plat is laid out could benefit you if you're going into a rural area for a case. On large plats of land there are likely to be multiple exits. So, you would want to drive around the area and look for all possible exits. If the plat is large, you can determine just how far you need to go and how feasible it is.

Criminal records obviously point to whether or not your suspect has a criminal record. These are a no-brainer. While you're in the room with the criminal records, be sure to check both civil indexes and chancery. These include divorce records, restraining orders and many other complaints that may or may not result in punishment and fines. They also include valuable address information many times and can lead you to validate social connections.

Last but not least, always check the Wills indexes. They may not seem very useful but can lead you to important clues as to property owned by the suspect, as in guns his grandfather may have left him that aren't registered, and family connections.

Often you can find most of these records online and you won't even need to go to the courthouse. Virginia has a healthy online system of records for many of the court systems. It includes criminal, civil, general district, traffic and appeals cases. For wills and chancery you still have to go to the courthouse. Plats can be found at the link below.

Virginia Courts Online Case Information
Virginia GIS Sites