SeCTiON 1

IMPROVised EXPLOsiVe DeViCes

An improvised explosive device (IED) is a homemade bomb designed for unconventional use and may or may not use military explosives. IEDs can be disguised as just about anything and can be hidden just about anywhere. The IED is an effective and deadly weapon that can be used with minimal training and at little risk to the bomber. IED TOOLs & MATeRiALs Copper wire Glue Wood Plastic Knives Screwdrivers Wire cutters Spoons

Section 1: Improvised Explosive Devices

1

Section 1: Improvised Explosive Devices

SMALL CLUes Yellow fingertips = picric acid White crystals in jar in refrigerator = acetone peroxide Urea & nitrate acid = urea nitrate high explosive Hexamine, sulfuric acid and hydrogen peroxide = explosive HMTD Sulfuric acid, nitric acid, glycerine & baking soda = nitroglycerine, any container of clear liquid considered nitroglycerine until proven otherwise. LATeNT FiNGeRPRiNTs LOCATiONs Liner, case, base plate, screw caps Associated arming and triggering devices Duct tape or other adhesive Cell phones triggers 3-D fingerprint impressions imbedded in the explosive. Explosive will need to be removed, examined, & photographed to record fingerprint impressions Tape

 Tools Receiver on radio controlled IED Pressure plate SIM cards, batteries Thermoplastic adhesive or hot melt adhesive DNA LOCATiONs Tape Tools The receiver on a radio controlled IED (RCIED Pressure plate SIM cards, batteries Container fragments Thermoplastic adhesive or hot melt adhesive

Section 1: Improvised Explosive Devices

3

Section 1: Improvised Explosive Devices

SeCTiON 2
POsT BLAsT INVesTiGATiON
Upon notification, the lead investigator should obtain as much information as possible about the incident and assess the situation for safety and security issues and make sure the site is secured from those not directly involved in the investigation. An initial walk-through should be completed to get an understanding of the nature and extent of the scene. The investigator must then determine what resources (personnel & equipment) are needed in order to conduct a thorough investigation. Organized searches should be conducted, scene documentation should be conducted, fingerprints & other evidence collected. Finally, a final walk-through should be completed after which the site can be turned over to proper authorities or owners as appropriate.

Section 2: Post Blast Investigation

5

Section 2: Post Blast Investigation

Post Blast Investigation

SAFETY Investigation Sequence Arrive on scene Obtain info from on-scene personnel Scope & Safety First aid Fire & Rescue Secondary devices Summon EOD personnel Engineers & Utilities personnel CBRN considerations Walk through

WALK THROUGH Is it safe?

Establish inner & outer perimeter Select location for Command Post Determine access point Summon needed personnel & equipment Scene search & documentation Evidence collection & packaging Final walk through
Release scene

What happened? Type of explosive used? Where is the seat? Type & location of evidence Equipment needed

DOCUMENTATION Notes Photographs Diagrams

Establish Scene Perimeter

Outer Perimeter

Section 2: Post Blast Investigation

r Perimete r Inne
iece of Ev ide st P he
evidence Point of Blast evidence evidence evidence 50% more

Fa rt

Command Post

Scene Command Post

CONdUCTiNG INiTiAL WALK-THROUGH Safety Issues  Potential hazards  EOD/Bomb tech check for secondary devices  Structural integrity  Chemical and/or breathing concerns  PPE should be used
7

e nc

Section 2: Post Blast Investigation

Documentation  Note taking  Date  Time  Location  Weather  Lighting conditions  Personnel on-scene  Witness information  Smells  Sounds  Tastes What happened? (accidental, mechanical, chemical explosion) Determine type of explosion Determine seat of explosion  Determine epicenter  Use of thermal imager within 15-30 minutes of explosion  Examine area for visible explosive residue Identify & collect physical evidence What personnel & equipment do I need?

SeARCH TeCHNiQUes Grid Search Indoors or outdoors Searching for a large amount of evidence or for just a few pieces Easy to coordinate Systematic Line Search
2 4 3

Section 2: Post Blast Investigation

1 Outdoors, a few items of evidence expected to be found.

Set parameters of search area Assemble search team at one end of crime scene 1 member to a lane
9

Section 2: Post Blast Investigation

Arms-length apart Team moves in unison Concentrating on the area in front of them As evidence is found line stops & waits for documentation/collection team to photograph & measure evidence Collect evidence, place in container Untrained personnel used as line searchers

Searchers put up hand when evidence found Trained personnel can inspect & determine value
10

 Trained investigators can photograph, diagram, collect Grid Line Combination The grid & line search methods can be combined Large expansive areas covered with grids Each of these grids searched using line search method Spiral Search Used by single investigator with limited resources Begin at seat of blast Walk in ever expanding spiral out away from seat Start over from different location, move in ever smaller spiral towards seat Scene searched twice
Spiral Search Pattern

Section 2: Post Blast Investigation

Point of Blast

11

Section 2: Post Blast Investigation

Sifting Very small pieces of evidence Separate evidence from soil or debris Material placed in trays with screen in bottom Material sifted through successively smaller screens Used on material from blast crater Access control log Name Agency affiliation Time of arrival Evidence recovery log Description & location of evidence Name of the person who recovered evidence Time recovered Who it was turned over to

12

CRiMe sCeNe PHOTOGRAPHY CONsisTs OF:

Over-all Photography

Section 2: Post Blast Investigation

Cover entire scene Aerial photo or from ground level, entire scene in frame Select 4 points to form a square around scene Point camera into center of scene 35-60mm lens
Mid-Range Photography

Record 2 or more items to show association/proximity show evidence and proximity to fixed object, victim, vehicle, other pertinent item Natural eye level perspective 35-60mm lens
13

Section 2: Post Blast Investigation

Close-ups

Individual item in single photograph Fill frame Maximize detail Macro or 50-70mm lens 2 photos of each item  With & w/o scale -- Scale parallel w/photo frame -- Film plane same as evidence -- Identifying info included in photo
One-to-One or Macro Photographs

Extreme close-up True-to-life size photo Large format camera is best Macro or 50-70mm lens
14

Place Holder for 1 to 1 photo

 Used for latent fingerprints Footwear impressions Pattern wounds on skin Bite marks, etc.
Expediting the Photographic Process

Section 2: Post Blast Investigation

Process method  Complete all photography first  Collect all evidence Combination method  Concentrate on single item  Take overall, mid-range & close-up  Collect item  Move on to next item  Repeat photography & collection Consider photographing crowd & on-lookers in case suspect is observing

15

Section 2: Post Blast Investigation

VideO PHOTOGRAPHY
Point 4 Point 5 Point 6

Point 3 Pan Right Pan Left Point 2 Point 1

Videography

Over-all Mid-range Close-up shots Videographer remains stationary Pan & zoom as necessary No or limited audio
Over-alls for video

Select 4-6 points on perimeter of scene Set lens at wide angle

16

 From points film while pointing camera into center of scene Record for 5-10 seconds. Slowly pan to left & right limits of scene Pause 5 to 10 seconds at each side Repeat pan & shoot at all perimeter locations.
Mid-range for video

Section 2: Post Blast Investigation

Move into scene Natural eye level perspective Select 3 to 4 important pieces of evidence/landmarks Remain stationary Pan to left most item Pause 2-3 seconds Pan back to the center Pause 3-5 seconds Pan to right most item Pause again 2-3 seconds Concentrate on 3-4 selected items

17

Section 2: Post Blast Investigation

From same position, film single item 3-5 seconds Slowly zoom into the single item Pause 3 to 5 seconds Zoomed back out Film next item of interest Zoom-in and zoom-out process repeated for each item.
Close-up for video

Consider close-up photograph Use video of item to show its operation Use to show hiding places Demonstrate purposes Choreograph and practice filming MeAsUReMeNTs Generally: At least 2 people (more might be necessary) Person #1 holds measuring tape over predefined landmark or anchor point

18

 Person #2 pulls tape to each item of interest Person #2 reads out measurement Person #1 records distance on sketch Birds eye perspective Encompass entire scene Fill entire sheet of paper Equipment: Graph paper with inch grid lines Pencil Straight edge or ruler Plastic drafting templates used for complex shapes Measuring Techniques Choose one technique Do not mix techniques GPS not designed for accurate measurement

Section 2: Post Blast Investigation

19

Section 2: Post Blast Investigation

Triangulation

Two fixed points Take measurements from points to each item Effective for indoors & outdoors Extensive scenes that cover a large area Not for scenes or areas that are not conducive to locating fixed points (fields, open areas)
Base-line

Triangulation
Fixed Point Fixed Point

Used to record distances from a fixed line of reference Interior wall, a straight line sidewalk, the exterior wall of a house or building Baseline or the curb on a straight section of road.
20

 Line must be straight so that accurate measurements can be made at a perpendicular (right) angle from the line to the evidence. Good general purpose method Indoors or outdoors Permanently fixed straight line reference Fixed line can be constructed using two fixed points and a string. GRid From a single fixed reference Single reference is permanently fixed object Two base-lines Two measuring tapes Right angles from each other Indoors or outdoors

Section 2: Post Blast Investigation

Grid

3 9

21

Section 2: Post Blast Investigation

DIAGRAMS

Rough Sketch

Not meant to be work of art Record site in graphic format Like investigators notes inch graph paper is best White, 8 by 11 inch paper can be used instead Place objects on diagram proportional to actual scene. Show entire site Include all damaged buildings, vehicles, roads
22

 Show location & measurements to all:  Evidence  Blast seat  Victims  Landmarks Legend  North direction  Location of incident  Date  Time  Case or incident number  Agency/Unit conducting investigation  Name of sketcher

Section 2: Post Blast Investigation

23

Section 2: Post Blast Investigation

Case 111721088 Date 3-16-2011 Time 0735 Location:1234 Main St. VBIED Attack S. Holmes

Garage entrance

Miller Office Building Damage

Housman Building

vehicle hood Guard station

Victim 3 Victim 2 X Blast Site

Victim 1

Rear of vehicle

Exit Drive

vehicle door

Entry Drive

Main St.

Finished Sketch

Cleaned-up version of rough sketch Show other investigators, witnesses, commanders, prosecutors Included in the report Completed in investigators office Using notes and rough sketch as guide Legend State whether or not it is drawn to scale

24

SeCTiON 3
ROLe OF TRACe EVideNCe iN POsT BLAsT INVesTiGATiON
The single most important step in the detection and analysis of explosives residues is the collection of appropriate samples from the explosion scene. The ultimate detection and identification of these explosives in the laboratory will depend on the bomb-scene investigators skill and ability to recognize and sample the areas most likely to contain such materials. WHAT TRACe EXPLOsiVes MATeRiALs CAN TeLL Us Conventional Person Tracehairs, fibers, paint chips, etc.,
TRACE TRACE

Section 3: Role of Trace Evidence in Post Blast Investigation

Hairs

Evidence Triangle

Object

 DNA (possible identification)

TRACE

Place

25

Section 3: Role of Trace Evidence in Post Blast Investigation

Trace Explosive Evidence Collection

Porous Surface OR Non-Porous Surface

K-9, Sniffer or Vapor Sampling

Field Test Kit

Collection SMALL OBJECT LARGE OBJECT Collect a portion of object OR Vacuum, Swab, or Swipe

Package

Air-tight container

Transport to Lab

26

 Human-pubic, head, body  Animal species Fibers  Clothing, bedding, carpeting, etc.  Easily transferred  Type  Color  Dye Paint  Color  Type of paint  Chemical composition  Layering  Fracture matches Explosive Trace Evidence Manufactured  When & where manufactured  Domestic or foreign manufacturer  Chemical composition  Quantities used
Head DNA Body

Section 3: Role of Trace Evidence in Post Blast Investigation

Pubic

27

Section 3: Role of Trace Evidence in Post Blast Investigation

 Chemical properties  Collect labels or wrappers HME  Chemical components  Requirements to mix  Equipment needed to mix  Intelligence about bomb maker

28

DeCisiON TO MAKe: WHAT is THe ENd Use OF THis MATeRiAL?

Criminal Prosecution Intelligence Only Fully document the scene with photos, sketches, notes, GPS coordinates Organize the scene & personnel with assigned duties Secure scene, set up perimeter Collect & preserve all potential evidence Fully exploit the collection of trace explosive materials Initiate chain of custody on evidence. Document with a few photos as time permits. Get GPS coordinates. Grab & Go with obvious important pieces of evidence. If time permits, use clean cloth to collect potential trace residues. Prepare notes & reports once in secure area

Section 3: Role of Trace Evidence in Post Blast Investigation

29

Section 3: Role of Trace Evidence in Post Blast Investigation

WHeRe TO SeARCH FOR TRACe EXPLOsiVe MATeRiALs Epicenter/seat Collect samples from crater Multiple locations Place in new/unused paint can fill can  Areas around the seat  Search for bomb fragments & components -- Embed in ground/surfaces -- Handled as little as possible -- Place in glass jars, polyester or nylon bags. -- Low explosive, particles of powder may remain -- Check signs, vertical surfaces, and ceilings

30

Section 3: Role of Trace Evidence in Post Blast Investigation

320 m. 1,049 ft.

Crater 60 m. 196 ft. Explosive Residue Distribution

PResUMPTiVe & CONFiRMATORY TesTs Presumptive tests  Use only when actionable intelligence outweighs value of preservation  Limited in what is identified  Done quickly  Cheaply  Minimum training  Susceptible to false positive  Minimize use of presumptive field tests

31

Section 3: Role of Trace Evidence in Post Blast Investigation

 Beware of unknown bulk materials -- Fine powders or crystalline material should never be sampled without first checking to see if it is heat or friction sensitive. -- Immediately seek assistance from trained personnel, such as an EOD, bomb technician or forensic explosive chemist. Confirmatory tests:  Positively identify chemical reaction  Takes longer  Controlled environment (lab)  Special equipment/instrumentation  Skilled analyst/examiner. Sniffer technologies (vapor sampling)  Cannot detect all threat explosives  Commonly false negative, fail to detect on RDX, HMX, and PETN  Overwhelmed by bulk explosives  Less sensitive in harsh environments

32

COLLeCTiON OF TRACe EXPLOsiVe ResidUe Wear latex or nitrile gloves, Full body PPE gear/clean poncho Clean between samples Use swabs for hard surfaces (rubbing back and forth motion, checking to see if it is heat or friction sensitive) Cut samples of porous materials COLLeCTiNG LiQUid & SOLid EXPLOsiVes Assembly location is particularly dangerous Full body PPE, boots and rubber gloves EOD search area for booby-traps. Use air-tight containers as soon as possible

Section 3: Role of Trace Evidence in Post Blast Investigation

33

Section 3: Role of Trace Evidence in Post Blast Investigation

Collecting Bulk Material Material

Liquid

Amount
1 oz. or less

Container
Pour liquid into glass container. Place glass container into secondary container. Glass jars, vials, anti-static bags

Solid & Powders

x x x x x x x x x

1 oz. or less

TRACe EXPLOsiVe COLLeCTiON FROM A LiVe PeRsON Full body PPE Disposable latex or nitrile gloves Place subject on clean butcher paper/ clean hospital sheet Check hands for residue Use presumptive kit on subjects hands before swabbing Swab using either commercial trace collection kit/poor-mans kits. Check fingernails

34

SUiCide BOMbeRs ANd THeiR EFFeCT ON THe SCeNe EXAMiNATiON Identify Bomber Body parts Fingerprints, DNA, dental, scars, marks, tattoos Identification papers Clothing Identify Bomb Components Vest, belts Shrapnel Trigger POOR-MANs swAb KiT Supplies needed Cotton balls Disposable forceps Isopropyl alcohol Disposable gloves
Identify Bomb Identify Person
Check subjects: Hair Face Hands Fingernails Shoes

Section 3: Role of Trace Evidence in Post Blast Investigation

Collect clothes

on sheet or butcher paper .

35

Section 3: Role of Trace Evidence in Post Blast Investigation

Glass vials (various sizes) Full body PPE suit Procedure Put on the PPE suit & gloves Use forceps to pick up cotton ball Isopropyl alcohol poured onto cotton ball Damp but not soaked Using forceps as handle, swab area Swab area the size of a dinner plate Place cotton ball into glass vile, seal & label 2 control swabs provided to forensic examiner 1st control consists of alcohol dampened cotton ball not used for any sample collection.  Seal 1st control in vial  Labeled CONTROL  2nd control is alcohol dampened cotton ball

36

 Swab outside of PPE suit & gloved hands  Place 2nd in another glass jar labeled CONTROL 2/CONTROL SUIT PACKAGiNG TRACe MATeRiALs iN IdeAL SiTUATiONs Paper bags, envelopes or cardboard boxes Seal with evidence tape on all openings Do not use staples Use appropriate sized container Never package wet items in plastic bag Wet items should dry Metallic items found submerged in snow, ice or water  The evidence should be placed in container that can hold the water the item was found in  Submerge item in water and transport to the forensic lab in bucket/large plastic container  Prevents rusting/oxidization

Section 3: Role of Trace Evidence in Post Blast Investigation

37

Section 3: Role of Trace Evidence in Post Blast Investigation

PACKAGiNG EXPLOsiVes EVideNCe Air-tight containers Unlined metal paint cans Glass jars Polyester Nylon bags Clean, new & specifically manufactured for transportation

38

SeCTiON 4
TiMe-GATed COLLeCTiON SCeNARiOs
If the circumstances change from relative safety with unlimited time to a situation where time on scene must be limited, the investigator must still have a way to collect valuable evidence, even if it is less than the optimal amount. The following time-gated scenarios are designed as examples of situations where the investigator has various items to collect under varying time or emergency conditions.

Section 4: Time-Gated Collection Scenarios

39

Section 4: Time-Gated Collection Scenarios

UNLiMiTed TiMe ANd SAFeTY

Optimal Collection

Glass Jar

OR
Package evidence in air-tight container

Plastic Bag

Collect the item

OR
Collect a portion

OR
Collect a swab

Survey the Crime Scene Leader obtains overall view of the scene Determine crime scene grids or collection zones Aerial photographs or videos
40

 Determine blast pattern Locate evidence. Establish a Perimeter and Command Post Cordon scene Establish inner perimeter  Farthest piece of evidence + 50% Establish outer perimeter  Site command post  Investigation command post Ensure Crime Scene Safety Sweep for secondary devices Environmental or structural hazards Cut off nonessential utilities Organize Resources Evidence collection teams Forensic personnel Consultants Equipment Collect Trace Explosive Evidence Blast seat or crater Clean, sealed metal cans

Section 4: Time-Gated Collection Scenarios

41

Section 4: Time-Gated Collection Scenarios

Control samples of soil Swabbings from  metal street signs  vehicles  nonporous surfaces Priority to:  blast effects  charring, pitting, or deformation  Porous surfaces -- wood, rubber, and textiles -- sampled by cutting pieces of material -- seal in metal cans or nylon heat-sealed bags Collect Non-Trace Evidence collect and preserve  metal, rubber, upholstery associated with VBIED  IED fuzing system

42

LiMiTed DURATiON (2 HRs) Secure Crime Scene Safety Quick search for secondary devices Structural hazards Establish perimeter around collection team. Collect Trace Explosive Evidence Soil and other surface material from seat or crater Seal in any clean container Swabbings from:  metal street signs, vehicles, other nonporous surfaces Porous surfaces  wood, rubber, textiles  cut pieces of the material  seal in any available uncontaminated container Note locations of items collected Transcribe notes at earliest safe opportunity.

Section 4: Time-Gated Collection Scenarios

43

Section 4: Time-Gated Collection Scenarios

Collect Non-Trace Evidence If time permits Primary & secondary fragments Note locations of items collected Transcribe notes at earliest safe opportunity.

44

BATTLeFieLd CONdiTiONs OR HURRY UP (20 MiN)

Hurry-up Collection Grab & Go Quick Swipe

Section 4: Time-Gated Collection Scenarios

OR

Found IED Components

Secure Crime Scene Safety Quick search for secondary devices If any are spotted, immediately evacuate Structural hazards Alert to approaching hostile forces
45

Section 4: Time-Gated Collection Scenarios

Collect Trace Explosive Evidence Collect material from the seat or crater Store in any available container Other team members should:  use gauze from first-aid kits  swab blast-affected nonporous objects Evacuate to safe area Log items of evidence, location and method of collection Collect Non-Trace Explosive Evidence Scan for IED components Place small items in pockets and/or knapsacks Log items of evidence, location and method of collection

46

SCeNARiOs FOR NON-IdeAL CONdiTiONs The following scenarios are incident specific. They illustrate various types of incidents and the best strategy for maximizing the investigation.
Scenario 1: Roadside IED (20 Minutes)

Section 4: Time-Gated Collection Scenarios

20 minutes or less, due to security issues Focus on providing security and evacuating wounded Security provided for approximately 45m from explosion site Checked perimeter for secondary devices Locate seat (crater) quickly Search for IED components (initiators, timers)  Washing machine timers  blasting caps  cell phone parts  Pressure plates  Wiring  Observation point used by bomber  Det cord

47

Section 4: Time-Gated Collection Scenarios

Swab  Crater  Surfaces or items too large to collect  Soil sample of the crater Documentation (measurements) of the scene not necessary Photos taken with point-and-shoot camera Notes made later Items seized placed in cleanest container Chain of custody started as soon as possible Not an issue if intelligence use Check bomber observation point, search for DNA & fingerprints on drinking bottles, cigarette butts
Scenario 2: Vehicle-Borne IED

Car, truck, motorcycle Abandoned and/or broken down Focus on providing security and evacuating wounded
48

 Security provided for approximately 45m from explosion site Checked perimeter for secondary devices Locate seat (crater) quickly Search for vehicle parts, identification number Swabbing more critical, concentrate on vehicle interior Metal, plastic surfaces, roadway swabbed Porous surfaces cut & bagged (seat coverings, flooring, clothing, the interior car roof area), Check for fingerprints on items not badly damaged, time permitting Collect what cannot be processed on scene
Scenario 3: Homemade Explosives Site

Section 4: Time-Gated Collection Scenarios

Is site active (currently cooking)? If so think safety. Search for:  chemical precursors  mixing containers  stored precursors
49

Section 4: Time-Gated Collection Scenarios

 processing equipment -- filters (such as coffee filters) -- strainers -- stirring devices -- grinders (even mortar and pestle) -- cooking stoves  If bulk substances are not present: -- Swab tabletops for potential precursors -- Loose, observable precursors may be present -- Handled safely  Check areas for latent & DNA collection
Scenario 4: Suspect From an HME Lab

Search suspect for weapons, papers, ID Collect fingerprints & buccal swab Have suspect stand on clean sheet of paper Have suspect remove clothes, shoes, head cover
50

 Package items in air-tight container ASAP Collect sheet or paper Swab suspects hands Look for discoloration of skin on hands Yellow discoloration from acids, whitening from peroxides Below is a chart describing two techniques for collecting various trace evidence. The best technique should be used when time and safety are not primary concerns. If the situation requires an expedited search and collection of evidence, then the expedited technique should be used.

Section 4: Time-Gated Collection Scenarios

51

Section 4: Time-Gated Collection Scenarios

Trace Evidence Explosive Material

Best Technique Collect 1 oz or less, package in air-tight container Collect item residue is on, package in airtight container Collect item hair is on, package in breathable container Collect item ber is on, package in breathable container Collect item soil is on, package in breathable container Collect item powder is on, package in breathable container Collect item paint is on, package in breathable container

Expedited Technique Grab & Go*, Quick Swipe** OR Swab, package in air-tight container ASAP Grab & Go, Quick Swipe OR Swab, package in air-tight container ASAP Collect hair, package in druggist fold paper ASAP. Collect ber, package in druggist fold paper ASAP. Grab & Go, Quick Swipe OR Swab, package in breathable container ASAP Grab & Go, Quick Swipe OR Swab, package in breathable container ASAP Collect paint chips, package in druggist fold paper ASAP.

Explosive Residue

Hair

Fiber or cloth

Soil

Powders

Paint chips

52

Section 4: Time-Gated Collection Scenarios

Wood

Collect item wood Collect wood, is on, package package in druggist in breathable fold paper ASAP. container Collect item glass is on, package in breathable container Collect item metal is on, package in breathable container Collect item plant material is on, packagge in breathable container Collect food item, package in breathable container, refrigerate as soon as possible Collect item wire is on, package in breathable container *Grab & Go Place item into a container ASAP and leave area. Collect glass particles or a section of the pane, package in druggist fold paper ASAP. Grab & Go, Quick Swipe OR collect particles, package in breathable container ASAP Grab & Go or collect plant material, package in druggist fold paper ASAP. Grab & Go or food material, package in breathable container & refrigerate.

Glass

Metal

Plant material

Food

Wire

Grab & Go or wire material, package in druggist fold paper ASAP. **Quick Swipe Using a clean cloth wipe the surface to collect residue. Place cloth into container and leave scene.

53