CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:33 Page 1
Issue 1 CBRN Forensics Forensics in a contaminated environment
Supported by GIFT Forensics The World’s Only Manufacturer of BSL-3 Mobile Laboratories
MOBILE | MODULAR | LABORATORY COMPONENTS 1-386-265-4300 www.GERMFREE.com CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:33 Page 1
Foreword Foreword Hugh Gregg, head of the Organization for the Prohibition of Chemical Weapons (OPCW) laboratory
The Merriam-Webster dictionary defines forensic as that it was the Ames strain. Complete genome sequencing ‘relating to the use of scientific knowledge or methods in over the next few years enabled the FBI in 2008 to solving crimes’. The well-developed field of forensics conclude that the anthrax used in 2001 all originated from becomes considerably more challenging when additional a single flask of material. hazards, such as chemical, biological, radiological or nuclear are present at the scene of an investigation. Protecting first In 2014, the National Academies Press published Science responders from these hazards is a priority, as is Needs for Microbial Forensics: Developing Initial preservation of the evidence. Awareness, training and tools International Research Priorities. This documented noted: are key elements for safe, successful outcomes. “…that, at the time of the anthrax letters mailings, the tools and technologies that were readily available were not Awareness that additional hazards may be present beyond adequate and the science of microbial forensics was in its what can be seen is the first step. This new journal will aid infancy and limited to a few pioneering laboratories.” The in raising the awareness of the additional risks of working document also highlights the need for this to be an in a CBRN environment. Training in a variety of scenarios international collaboration with both reference collections will increase the capabilities and confidence of the first and accessible databases. responders and forensic investigators in responding safely. Finally, tools, in the form of hardware - technology such as Where does this leave chemical forensics? A limited amount sensors, protective equipment, etc. - and procedures are of research has been carried out and plans are underway for needed to ensure the preservation of evidence while more research. A fourth symposium on chemical forensics protecting the investigators. will be held at the Spring 2017 American Chemical Society National Meeting. While there exists no international The procedures and processes used in handling CBRN research effort on chemical forensics at this time, chemical contaminated evidence need to be carefully thought out production techniques have been used to attempt to and implemented. Decontaminating an item may lead to determine attribution. loss of the forensic evidence necessary for the investigation. Additionally, information from the CBRN The third report of the OPCW - UN Joint Investigative agent may, itself, be a key part of the investigation. This Mechanism (24 August 2016) includes the following text: aspect of CBRN forensics has been, and is being “Multiple sources suggested that the sulphur mustard in researched to different degrees. Using the Chemical question was undistilled and had been generated through Abstracts Service’s SciFinder tool, searching for nuclear the Levinstein process. According to them, the bad smell forensics returns 426 articles, while microbial forensics or (rotten eggs) and colour of the substance (dark green/blue) biological forensics returns a total of 143 and chemical were consistent with sulphur mustard used by ISIL in other forensics returns only 11. Clearly, RN forensics is far ahead incidents … Some sources provided information that of CB forensics. indicated that ISIL had the capacity to produce sulphur mustard through the Levinstein chemical reaction process. In 2015, the International Atomic Energy Agency, issued [The OPCW] confirmed that the sulphur mustard from the revision 1 of the implementation guide Nuclear Forensics in Syrian Arab Republic did not contain impurities such as Support of Investigation. The authors state: “Nuclear polysulphides, meaning that a different process was used by forensic examinations have been successfully applied to a the government. The OPCW also reported that the sulphur number of reported cases involving the illicit trafficking of mustard used by ISIL in northern Iraq on several occasions high enriched uranium and plutonium, as well as events in 2015 and 2016 was produced through the Levinstein involving nuclear and other radioactive material out of process. … There is not sufficient information available to regulatory control.” draw conclusions on the origin of the sulphur mustard used during this incident.” Microbial forensics has come a long way in the past two decades. In the 2001 anthrax attacks in the US (the I look forward to more research on chemical forensics, and Amerithrax case), DNA fingerprinting proved fairly early wish the new journal success!
CBRN Forensics 1 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 2
Contents Content
CBRN Forensics is entirely funded via the European Commission project GIFT: Generic Integrated Forensics Toolbox. Falcon Communications has not profited from this magazine in any way.
Web: www.giftforensics.eu
Legal Niceties: Reproduction in whole, or part, of any content of CBRN Forensics, without prior permission, is strictly prohibited. Any correspondence should be addressed to The Editor, CBRN Forensics. We acknowledge the assistance and hard work of many individuals, associations and organisations who have contributed to this magazine. The information published in this magazine has been published in good faith and the opinions contained in the article are those of the author and not Falcon Communication Ltd. Photos are credited individually, non attributed articles are from the CBRNe World archive. ©Falcon Communication Ltd 2016. Front cover image ©AWE/MoD
2 CBRN Forensics CBRNe Forensics vCorrections:CBRNe Forensics vCorrections 30/01/2017 16:55 Page 3
Contents
nten1 Foreword 27 – 29 CSI UK!ts Karl Harrison, from Cranfield University, on the 4 Welcome to GIFT UK’s response to CBRNE incidents
5 – 7 Meet the Team 30 – 31 Analyse This! Michael Madden, from Analyse IQ, on chemometrics 8 – 9 Future dreaming in forensic analysis Ed van Zalen and Peter de Bruyn, from the Netherlands Forensic Institute on what the future holds 32 – 35 Habsburg Hazmat 10 – 11 Gift wrapped Gunter Povoden talks to Claudine Weeks about Ed van Zalen talks to Claudine Weeks on the Austrian military forensics GIFT legacy 36 – 37 Team effort 12 – 13 A good sniff Lt. Col Martel and Katleen de Meulenaere on Eric Moore, from Tyndall University, on some of the Belgian military forensics GIFT chemical detectors 38 – 41 CSI2 14 – 17 Common approach path Dr Randall Murch on the blueprint for a CBRN Dr Jason Bannan, from the FBI Laboratory, on the forensics capability genesis of CBRN forensics 18 Out of the darkness 42 – 43 Mind the Gap Johan Sand, from STUK, on stand off alpha detection The gaps in European CBRN forensics 19 – 20 The Searchers 44 – 46 Dangerous Clues Daan Noort, from TNO, on their work to improve Steve Johnson on forensics, SIBCRA and WIT forensic chemical detection 21 – 24 Theatre night 47 Light fantastic Adrien Sivignon, from CONSTOX, on pre-Bataclan Silvia Lopez on the GIFT differential mobility developments in French forensics analyser 25 – 26 Risky Business 48 Send for the fun police! Peter Den Outer, RIVM,, and Govert Verstappen, NFI, Iris Huis in 't Veld at Eticas Research & Consulting on the need for a CBRN forensics risk assessment tool on ethics in CBRN forensics
Published by Falcon Communications Limited Contact Details: Editor Business Marcoms Manager For Sales: CBRNe World Gwyn Winfield Development Claudine Weeks +1 443 605 2583 Suite 26, Basepoint, Manager [email protected] 1 Winnall Valley Road, Business James Ross Sub Editor +44 (0)1962 832 534 Winchester, Hampshire Development Jenny Walton SO23 0LD, UK Director Business [email protected] David Levitt Development Correspondents Executives Jeffrey Bigongiari For Editorial: Web: www.cbrneworld.com Art Director Anna Dziaczkowska Brian O’Shea +44 (0)1962 832 532 Twitter: @cbrneworld Tony Denton [email protected] LinkedIn: cbrneworld
CBRN Forensics 3 CBRNe Forensics vCorrections:CBRNe Forensics vCorrections 30/01/2017 16:59 Page 4
Welcome to GIFT
Welcome to GIFT The successful interrogation of evidence, either at a crime scene WP1: The management work package. Keeping the entire contaminated with chemical, biological, radiological or nuclear consortium on track and liaising with the commission, among other (CBRN) agents, or of the agents themselves back at the lab, is an things. absolutely vital part of CBRN defence. WP2: Composed of threat assessments, gap analysis and toolbox design. It aims to define the forensics community’s needs, to allow At present forensic investigation is hampered by a lack of protocols identification of what must happen to allow responders to perform and training in carrying out forensic analysis on CBRN their tasks safely, quickly and properly. contaminated materials. WP3: Two central themes, one being the development of protocols for use in the crime scene; the other is the development of The generic integrated forensic toolbox for CBRN incidents, or GIFT investigative methods for when the evidence is contaminated with CBRN, consortium, funded under the European commission’s chemical, biological or radiological agents. seventh framework programme, is designed to close up the many WP4: Development of procedures and methodologies to enable gaps inherent in this complex area and provide an integrated law traditional forensic science (DNA, fingerprint and electronic enforcement CBRN capability that is world class. devices) to be performed on CBRN contaminated exhibits. WP5: Looking at the CBRN agent itself, whether we can further The GIFT consortium is developing the most advanced forensic develop analytical procedures on the agent and also whether we toolbox for CBRN incidents in the world. Through the cooperation can identify signatures in the agent that could lead to methods of of Europe-wide research agencies, first responders, industrialists production and where key elements originated from. and subject matter experts, the toolbox will provide enhanced WP6: Integration of the forensic toolbox, ensuring all the capability in three key areas of CBRN forensics: technologies can work together. • Procedures, sampling methods and detection of CBRN agents at WP7: Validation and testing of the procedures and methods the crime scene. developed in WP3, 4 and 5. • Traditional forensic laboratory methods for dealing with WP8: Assessing the legal, ethical and societal aspects of the contaminated evidence. project in order to provide stakeholders with the appropriate • Laboratory methods for profiling CBRN agents released at an guidance to avoid any negative impact during the project, incident. execution or in an eventual future deployment based in this research. The GIFT consortium will address the issue of conducting forensic WP9: Dissemination - this will create a CBRN forensics community analysis in a contaminated environment by developing novel that will be able to help guide and validate the whole project. methodologies and technologies which will enable forensic investigators to perform enhanced analysis at the CBRN crime The Consortium scene. Some of the key innovations being explored are: The consortium consists of 21 partners, from nine different • Novel sensors for chemical and biological agents. European countries. • Detection of alpha-emitting particles using UV. • Development of decontamination methods that won’t impact The NFI – The Netherlands Tyndall University – Ireland on forensic traces. TNO – The Netherlands RIVM – The Netherlands 2 • Micro-analytics on-chip to detect agents of interest. M L – UK Falcon Communications – UK • Attribution signatures for chemical, biological and radiological FERA – UK AWE – UK agents. STUK – Finland FOI – Sweden • An education and training curriculum. NFC – Sweden Analyze IQ – Ireland NICC – Belgium RMA – Belgium In order to facilitate this work, the project has been broken down Space Applications – Belgium JRC-ITU – Spain into specific work package areas, each led by a partner agency, CEA – France Eticas – Spain with cross package working and cooperation as a key fundamental RAMEM – Spain LQC – Spain for success. The nine work packages are: Nanobiz - Turkey
4 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 5
Meet the team Meet the team The consortium consists of 21 partners, from nine different European countries
The National Forensics Institute – The Netherlands Falcon Communications – UK The Netherlands Forensic Institute (NFI) is one of the world’s Falcon Communications publishes CBRNe World magazine serving leading forensic laboratories. It invests heavily in research and the information needs of professionals around the world charged development to lay the foundations for innovative forensic with planning for or responding to chemical, biological, methods and technologies that will play an important role in the radiological, nuclear or explosives (CBRNe) threats or incidents. coming decades. The NFI also maintains close relationships with Falcon also produces the world-leading CBRNE Convergence industry, knowledge institutes and universities. events globally as well as a leading CBRNE product directory.
Tyndall National Institute, University College Cork – Ireland FERA – UK The Tyndall National Institute is one of Europe's leading centres A leading supplier of scientific solutions, evidence and advice for information, communications and technology (ICT) research. It across the agri-food supply chain. FERA’s role is about is the largest facility of its kind in Ireland with 450 staff, students understanding problems and enabling sustainable solutions and academic and industrial visiting researchers. Tyndall's through innovative thinking and the gathering and analysis of research is guided by, and applied to, finding solutions that can robust scientific evidence. FERA is the national reference be commercialised to meet the needs of society in laboratory for nine different areas, employing over 350 scientists communications, energy, environment and health through the and technical specialists. development of new technology in the fields of photonics, micro/nano-electronics and microsystems. AWE – UK This company has been at the forefront of the UK nuclear TNO – The Netherlands deterrence programme for more than 60 years. AWE’s outstanding The Netherlands Organisation for applied scientific research (TNO) nuclear skills and expertise means that it is able to provide was founded in 1932 to enable business and government to apply intelligence and support to the UK government by developing knowledge. TNO is an independent research organisation focusing innovative solutions to combat nuclear threats, terrorism and on five social themes: nuclear proliferation. AWE is recognised as a centre of scientific, • Industry - from economic stagnation to growth in high- engineering and technological excellence, equipped with some of technology industry. the most advanced research, design and production facilities in • Healthy living - from illness and treatment to health and the world. behaviour. • Defence, safety and security - from a wide range of threats to STUK - Finland controllable risks. Finland’s Radiation and Nuclear Safety Authority (STUK) operates • Urbanisation - from urbanisation bottlenecks to urban vitality. under the country’s Ministry of Social Affairs and Health with the • Energy - from conventional sources to sustainable energy purpose of preventing and limiting the adverse effects of radiation, systems. controlling the safety of the use of radiation and nuclear energy, and engaging in associated research, education and RIVM – The Netherlands communications. It employs around 320 people, of whom just over The Dutch National Institute for Public Health and the 80% hold MSc or MA degrees. Environment (RIVM) carries out independent research and provides policy advice to help government authorities keep people and the FOI – Sweden environment healthy. RIVM works to prevent and control outbreaks FOI is one of Europe’s leading research institutes in defence and of infectious diseases by promoting public health and consumer security. It has 930 employees with various backgrounds – from safety, and helps to protect the quality of the environment. physicists, chemists, engineers, social scientists, mathematicians and philosophers to lawyers, economists and IT technicians. FOI 2 M L – UK has expertise in many fields of application, such as security A photonics technology company which designs and policy studies and analyses of defence and security, assessments manufactures award winning lasers and photonics systems, and of various types of threats, systems for crisis leadership and collaborates with research institutions and industries around the management, protection against and management of world to help develop new light-based applications that can make hazardous substances, IT security and the opportunities provided a positive difference. by new sensors.
CBRN Forensics 5 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 6
Meet the team
NFC – Sweden NICC – Belgium The Swedish National Forensic Centre (NFC) is one of Europe´s The National Institute of Criminalistics and Criminology (NICC) leading forensic laboratories with cutting-edge expertise. It was was founded in 1992 as part of the Ministry of Justice. With established as an independent expert organisation within the around 142 staff including 34 reporting forensic experts, its fields police authority with an overall responsibility for forensics and has of expertise include: drugs and toxicology; analytical chemistry; 1,100 employees. The NFC performs forensic research and paint, glass and safety ink; fire and volatiles; fibres and textiles; development, education and training, and analyses for incidents gunpowder; ballistics and digital information; mechanical ballistics involving CBRNE materials. and national database of ballistics; biology and genetics.
Analyze IQ – Ireland RMA – Belgium Analyze IQ Limited develops and sells an innovative, patent The Royal Military Academy is a military higher education protected software suite for analysis of the composition of institution in charge of the academic, military and physical mixtures, based on molecular spectroscopy data. Analyze IQ uses a training of the officers of the Belgian armed forces. new model-driven paradigm for spectral data analysis, with proprietary new machine learning techniques specifically designed Space Applications – Belgium for spectral analysis, that is both quicker and more accurate than Space Applications Services is an independent Belgian company traditional analysis, and can be used by non-chemometricians in which aims to research and develop innovative systems, solutions the field. The products have applications in fields as diverse as and products, and provide services to the aerospace and security manufacturing inspection, law enforcement, emergency services, markets, and related industries. The company has a strong focus and the pharmaceutical industry. on research and development with partners across Europe, the US and the Russian Federation.
6 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 7
Meet the team
JRC-ITU – Spain RAMEM – Spain As the European Commission's science and knowledge service, the RAMEM focuses on the design and manufacture of mechanical Joint Research Centre's mission is to support EU policies with and electromechanical equipment. RAMEM is backed by independent evidence throughout the whole policy cycle. Its work experience and technology acquired over 55 years of activity, and has a direct impact on the lives of citizens by contributing with its has over 40 engineers, doctors, graduates and technicians. research outcomes to a healthy and safe environment, secure energy supplies, sustainable mobility and consumer health and safety. LQC – Spain LQC sl manufactures radiation monitor and alarm equipment for CEA – France military, police, airports, state borders and other sectors. The French Alternative Energies and Atomic Energy Commission (CEA) is a key player in research, development and innovation in Nanobiz - Turkey four main areas: defence and security; nuclear energy (fission and NANObiz Ltd is a technology company that emerged from the fusion); technological research for industry; and fundamental Middle East Technical University (METU) in Ankara. NANObiz’s research in the physical sciences and life sciences. team currently comprises 30 qualified researchers, academicians, engineers and administrative staff. The company has products and Eticas – Spain R&D operations in CBRN and homeland security; nano- Ethics Research & Consulting works on the social, ethical and biotechnology; biotechnology and other areas. legal impact of security policies, innovation and technological development, as well as the interaction between changing social values, the possibilities of engineering systems and fundamental rights.
CBRN Forensics 7 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 8
Dr Futurity
Dr Futurity
Picture the futuristic CBRN crime scene... fingerprints, DNA or other trace material to and experts are happy that it is safe from any People in sharp suits gather round a large try to catch the perpetrators but also to breach, including a cyber attack. screen looking at the 3D scan of the crime identify used CBRN agenst that might have scene broadcast live to their control centre. been released during the incident Too good to be true? To the left of the screen is a complete They then send in a robot optimised to lift Only time will tell – but that’s the ambitious analysis of all the sensor data which has been latent fingerprints from the contaminated vision for CBRNE forensics in the very long collected by the artificial intelligence robotic material, and to collect DNA, without term future. Currently, members of the system and was despatched immediately. suffering any contamination issues, and generic integrated forensic toolbox (GIFT) The collected data was sent through to an without having to move any materials from consortium are exploring some of these new automatic analysis system and the results are the scene. technologies, (sadly no robots just yet), to now being presented straight back into the DNA test results are immediately take that key first step towards enabling command centre. generated through a lab-on-a chip expert more work to be done at the crime scene, The command team has a 360 visual view system, based on the DNA-profile the rather than having to transport everything to of the entire crime scene, along with clear perpetrators are identified from a crime the laboratory. identification of the location and the types of database and their details are passed to the Work Package 2, for example, was tasked agents within the scene, without going investigative authority and local police. with assessing the needs of CBRNE forensics anywhere near it. The perpetrators are arrested and all the for the near future – many of which will have Forensic teams now use the data and the evidence is securely and electronically solutions thanks to the work of the images, following questions from the processed and stored so there is no potential consortium – and to predict what may be investigative authority, to assess where the for discrepancy once the court case is ready. needed to counteract as yet unknown threats best evidence might be, and where to look for The security of the evidence is not in doubt, for the longer term.
8 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 9
Dr Futurity Peter de Bruyn and Ed Van Zalen, from the Netherlands Forensic Institute, on the future of CBRN forensics
throughout the EU member states, and also And the key differences, longer term? the development of more advanced While most of the information might still be capabilities within a few member states. available as separate (electronic) documents Countries with advanced capabilities in five years’ time, in 15 years the should be able to deliver operational support information should be accessible through to those member states with less advanced expert systems and actions taken with the core capabilities. aid of decision support systems. Developments should be aimed at This will mean that the decisions made developing both a basic forensic response for during the investigation process will be the contaminated crime scene throughout substantiated, validated and traceable, Europe and on international collaborations. improving the quality of the case in court. The latter need to be supported by the Detection and identification techniques necessary arrangements and conditions to will shift from the laboratory to the field, eg make that support feasible. through miniaturisation and lab-on-a-chip Contributing CBRN forensic experts should technology. Individually applicable detection be prepared to work under different judicial capabilities, from the near future, will be systems (eg with respect to chain of custody developed over time into more holistic or giving testimony). A high capability remote/robotic sensors in the far future. response will be more professionally Some forensic characterisation and developed (eg validated, supported by individualisation methods will still be too sophisticated technology and systems, etc) complex and sophisticated for field and the basic response will be broadened and application and will need to be done in a better substantiated. laboratory, albeit with new tools and techniques. What about ensuring chain of custody? Trends are emerging in the application of Forensic activities in the hot zone, still forensic investigation to CBRN crimes. At rather ad hoc or improvised for the near first the focus will be on developing forensic future, will be further developed into capabilities at existing CBRN labs and on professional, integrated and harmonised decontamination of exhibits for investigation processes with validated guidelines at traditional forensic laboratories. In the and procedures. long term the emphasis will be more and It is always crucial to make arrangements more on performing forensic investigations for a guaranteed chain of custody for and analyses at the crime scene/hot zone. forensic evidence and data gathered from Advantages and developments should be sensors and detection equipment at the crime taken from innovations in other scientific scene. Due to safety constraints it is areas eg medical science, where experiments important to select and prioritise forensic with remote surgery are already ongoing. activities in the hot-zone; establishing which This has the potential to lead to remote exhibits and forensic traces are being operation of unmanned (robotic) systems at Some of these results include interesting investigated onsite and which are being a CBRN crime scene by forensic experts from predictions, with a strong potential for future collected or sampled for laboratory a safe command centre. robots, which would eliminate the need to investigation. The main advantages of these place a human within the inherent danger of Priorities in the forensic investigation developments will be a faster, better and a CBRNE contaminated scene. Closer to hand will therefore focus on the identity and role safer delivery of results for the criminal is greater automation of detection and of related individuals (eg perpetrators, investigation under the required conditions collection equipment, putting far more makers and other potential actors); this (eg chain of custody, quality assurance). emphasis on the crime scene itself, rather includes, for example, the investigation of Profiling methods for CBRN agents - for than the laboratory. Robots and automation fingerprints, DNA, digital data and the provenance and comparison - and the offer an enormous reduction in provenance of CBRN materials used in development of supporting forensic reference contamination risk from CBRNE crime scenes, an attack. databases will also be developed. and through haptic feedback and dual These investigations are important not Furthermore individualisation methods should manipulators offer the promise of evidence only for finding the responsible individuals be adapted to contaminated materials. collection on a par with human interaction. and for preventing other attacks, but also for Finally, a European network for CBRN providing the prosecutors and judges with forensics should be developed over the years. So what is the consortium predicting for forensic evidence in court. This should evolve from an informal network the near future? Technology and technological in the near future into a well organised and The aims for the near future across Europe, applications in general, and in the IT area in structured official CBRN forensics network, are certainly focussed on aligning capability particular, can be expected to develop under the responsibility of the European across the countries. Currently, the focus is dramatically. This will definitely influence Commission and supported by the European on developing a basic response for use future forensic investigation capabilities. Network of Forensic Science Institutes.
CBRN Forensics 9 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 10
The GIFT that goes on giving
Ed Van Zalen, GIFT programme manager, talks to The GIFT Claudine Weeks about the need for GIFT that goes on and the difference it will make to CBRN forensics giving
EVZ: Forensic investigators are always CW: So why is there a need for this now? we use it to set a gold standard across looking for ways to improve and develop EVZ: At the Netherlands Forensics Institute Europe and raise the bar so that every their work and techniques but often when I (NFI) we have been running CBRN forensics country is able to develop a minimum core meet traditional forensics colleagues they as a specialism since 2003, largely as a capability for CBRN forensics. are all following the same path. reaction post 9/11. We started out just looking at how we could react to threats I would like to see a network whereby all That’s what excited me about the that might occur, but from 2008 we moved advanced capability countries partner with opportunities with the generic integrated to consider other kinds of incidents where forensic toolbox (GIFT) consortium – we are CBRN agents might also be released and how working with small and medium sized we can identify and characterise them. enterprises (SMEs) and researchers outside the forensics field to see where new and So while the institute has been running a innovative technologies can be applied to CBRN forensics programme since 2008, it the niche world of CBRN forensics. wasn’t until 2012 that we could clearly see the need to extend this across Europe; to There are lots of ways we can improve and grow the learning, share what we have learn and by looking beyond our sector we been working on with other countries and can make sure we are keeping up to date extend our knowledge further. That is what and moving forward. In the GIFT consortium led to GIFT. we are now working together with colleagues from a whole variety of CW: You talk about moving the industries to help take CBRN forensics to laboratory work, was this to become the next level. more high end focussed? EVZ: Yes, I started my career in the CW: So what does that next level laboratory, analysing surface waters for the look like? Dutch water board, for environmental issues. EVZ: We need to be able to do far more at Back then it was all carried out manually. the crime scene – more measuring and Today’s laboratories are far more automated recording safely at the crime scene so that and lab technicians have to be machine the laboratory is left with the high end operators. Much of the technology I used to work to do. dream about having in my lab when I started out is now completely obsolete. This is one of the most exciting parts of GIFT. We are working to create new Technology moves fast and that’s why we in equipment and protocols to bring more of CBRN forensics need to work with academia, the laboratory work safely out in the field. industry and SMEs to look at other ideas and innovations and how we can transfer these GIFT researchers are developing on-scene ideas and innovations into the forensic technologies, methods and instruments so domain. That’s the beauty of GIFT. we don’t have to take so many materials back to the labs, as well as looking at ways CW: So what will GIFT ultimately deliver to carry out traditional forensics on the for European CBRN forensics? contaminated materials. EVZ: GIFT is just one step, after this project is completed, the work will continue and we We want to develop new and innovative will be seeking for funding for further technologies such as robotics and more research and development. automated techniques which can be used within contaminated crime scenes, allowing The challenge for Europe is that not every us to do more on the scene with less risk to country has the same CBRN forensic our staff. capabilities available. My aim for GIFT is that
10 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 11
The GIFT that goes on giving
the other countries and work together across CW: Why is education and training so together at a crime scene. Generally, the two the continent on training and education. important? streams are separate at an incident. The EVZ: GIFT explores new procedures, priority for the safety stream, who are the CW: What would this network look like? technologies and techniques which will first responders, is to rescue people and EVZ: My dream would be to see the creation enable us to carry out traditional forensics in make the place safe again, while the security of a joint European centre of excellence in very difficult circumstances, either through stream, who are the investigators, want to CBRN forensics, set up with some of the GIFT decontamination or through containment prosecute the perpetrators. consortium partners. processes. Clearly it will be very important for anyone involved to be trained in how to I want to bring the safety and security This centre would be the main point for carry out these processes. streams together, to work in partnership and training, research and innovation in the understand each other’s roles. If we field, across the whole of Europe. We would That’s why as part of GIFT, we will be understand each other and we train bring together all the techniques for running exercises and using these to develop together, then responders could use some of working at the crime scene, which are being a curriculum, an education and training our equipment in the early stages to help looked at as part of GIFT, and train and offer programme to help support the roll out of shape their initial response and we can use them to all countries in Europe through this the toolbox across the EU. The toolbox will the information they gather to help shape centre of excellence. provide the procedures, protocols and our investigations. equipment all in one place, for the first time The centre could then provide very high ever, setting a world-class standard, so we Within GIFT the aim of the toolbox is that it specification laboratory work to support need to train people to use them. will connect with existing and future countries without the capabilities technologies so future developments in the themselves. It would deal with high end case I would also like to see cross training for first programme could include sensors and work and support innovation, training and responders and forensic specialists in the technology for first responders, which then education, and research and development in CBRN field so we can understand each link through to the forensics team, but this is CBRN forensics for all EU countries. other’s roles better and work more effectively a very long term cooperation goal.
Teamwork is the key: in terms of specialists, agencies and nations ©CBRNe World
CBRN Forensics 11 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 12
The software story The software story
12 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 13
The software story
By Dr Eric Moore, Director Taught Postgraduate Courses Analytical Chemistry, Chemistry Department, University College Cork and Scientific Lead for GIFT
Tyndall National Institute, University College fundamental part of their kit. It augments detect a certain family of compounds. Such Cork in Ireland has several roles within the what they have already, provides an easier instruments include ion mobility GIFT consortium. As the scientific lead for the way of doing risk assessment, suggests spectrometers, Fourier transform infrared consortium, one of my main roles in the GIFT future capability roadmaps and also acts as a spectroscopy, photo-ionisation detection project is to ensure that the science and starting basis for newcomers that might and flame photometric detection. technology being developed is on track and want to understand how to sample aligned to the objectives of the project. efficiently. It also needs to be flexible enough There is a need for complementary Obviously this is vitally important generally, to connect with future technologies. technologies that can be used for onsite but in terms of the GIFT project it is essential detection of chemicals that enable that we can demonstrate proof of principle, We are mixing past, current and future preliminary testing to be done at the as our final forensic toolbox will successfully generation capabilities to create a flexible crime scene: provide the teams who are making decisions and adaptable CBRN forensics toolbox. It is • Micro total analysis system (μTAS) devices on the ground at a CBRN forensic scene, with not meant to be a static delivery; it will that will enable flow through miniaturised all the information they need. evolve over time as current databases are capillary electrophoresis (CE). augmented with new information. We are • Chemical sensors that can be used to The aim of the GIFT consortium is to develop going to prove the value of a truly integrated provide a chemical profile in the a gold standard for CBRN forensics, through system. This is not about reinventing the development of a robust and extendible technology, protocols and procedures and wheel but truly doing something important portable sensing platform. make the processes at the scene quicker and for forensic scientists. • Molecular sensors for the disclosure of more efficient. chemical agents on surfaces. Our project team at Tyndall is helping to • Associated software for all the sensing Tyndall leads work package 6 (WP6), the increase the efficiency of response, to make technologies. toolbox part, to make sure all the technology the process quicker. The information provided is integrated and ultimately works together. by analysis of the sensors and detectors will We have been developing a custom-made mean that people understand what they are capability by integrating a commercially The institute is creating new knowledge that dealing with faster and can take appropriate available contactless conductivity detector will contribute to the overall forensic toolbox action quicker. The protocols and guidance (C4D), a printed circuit board (PCB), copper with a particular focus on the integration of from the information hub will inform people sensing electrodes and a hybrid sensors and detectors to provide real time how and when to deal with the situation, for polydimethylsiloxane/glass microchip. The information on chemical analysis. These example, what personal protective microchip sits on the PCB and four platinum technologies will also contribute to new equipment (PPE) to wear and how to treat electrodes are located into four wells. This methods to ensure the safety, security and those exposed. microchip system is being developed to help chain of custody for that data throughout the with the detection of chemical agents and so process. We are also working with partners For all data going into the toolbox, every far we have been testing it on organo- on an information hub. This will facilitate element will be logged, date-stamped and phosphate nerve agents. We have already best practice in terms of operating only accessible by those who require it, had promising results testing the prototype procedures and protocols, so that everyone supporting the chain of custody for all and will be validating it at the GIFT exercise across Europe can tackle a CBRN forensic potential court case evidence. in March 2017. scene in the same way. The Tyndall National Institute also has key At present we are focused on nerve agents as GIFT will be creating the toolbox with all competences that specialise in creating our proof of concept targets with other the elements for detection, analysis and miniaturised systems for a wide variety of project teams in GIFT doing likewise, but information, which will enable anyone at the end users. I am the Principal Investigator there is no reason why this couldn’t be scene to make informed decisions about key of the Sensing and Separation group, we expanded out to other chemicals of interest actions to take or how to approach the scene. focus on miniaturised integrated sensing in the future. It’s about having the right information at the for the end user. We are using that right time. technology and sensors expertise in WP3 The big advantage of our system is that it to explore ways of improve CBRN forensics can all be contained within a wheeled We are developing specialised sensors and at the crime scene. suitcase. It’s battery operated so it can be detectors for CBRN forensics and the idea is easily used out in the field. This is the first that the software element of the toolbox will We will be developing a new chemical time a portable capillary electrophoresis be able to connect with both existing sensor for detecting nerve agents in liquid (CE) system has been available to do technology and the new technologies being form. The instruments currently used for chemical analysis in the field and it enables developed within the GIFT project. onsite chemical speciation do not have scientists to bring their lab to the crime sufficient sensitivity or resolving power, or scene – this is a key focus for the GIFT It is expected that existing and future CBRN both, and therefore have a very high false consortium and for the forensic toolbox forensic teams will see the GIFT toolbox as a alarm rate or are too selective and only in general.
CBRN Forensics 13 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 14
Common approach path Common approach path Dr Jason Bannan, senior scientist at the FBI Laboratory tells Gwyn Winfield about developing CBRN forensic science
There is a suggestion that CBRN events are Dr Bruce Ivins’ motive was always claimed liaised with the SIBCRA programme in the about as common as unicorn poop. Many to be his desire to see more research into UK as well as the US Army’s 20th CBRNE individuals think that a CBRN incident has anthrax and CBR agents, and ironically his command and exchanged information over to cause fatalities in several orders of very desire might have been his prosecution. the years through AUSCANUKUS [the magnitude, but this only focuses on one end Dr Jason Bannan, senior scientist in the quadripartite agreement involving Australia, of the scale. At the opposite end are many Forensic Response Section at the FBI Canada, the UK and US. Ed]. We also worked incidents ranging from attempts to create Laboratory in Quantico, stated that it didn’t with other organizations such as ASTM to CBR devices, to people making substances feel like a great opportunity to the people develop standards for collection. but unable to use them, through to on the ground at the time, but the “We exercise every two years with all four individuals selling or using viable complexities of the case started the ball countries on a CBR scenario where we can substances. To focus on the upper end of the rolling. “It was a complicated case. The observe each other, including a science day scale is to miss all the work that forensic crime scene extended from Connecticut to where we share scientific advances, or tools technicians are doing on CBR crime scenes Florida and over the years we needed to that we employ or have developed. Much of every month. work out how to exploit a lot of evidentiary the technology, the suits, powered air- Admittedly much of this is not at the material in support of the investigation. purifying respirators (PAPRs) and other super toxic chemical warfare (CW) or Much of that turned out to be trying to advances have been in partnership with our category A biological warfare (BW) stage, exploit conventional evidence, but early in defence colleagues here in the US through but it provides a considerable amount of the case it was decided that some of the the combatting terrorism technical support casework and a growing understanding and most valuable evidence needed to be office (CTTSO). It does a lot of work for the professionalism in CBRN forensics. It has to decontaminated, or rendered safe, with military and plenty of the testing and be remembered that CBRN forensics is radiation. That reduced our ability to bring evaluation that supports arguably the most recent of all the forensic to bear some of the other disciplines like fields. Only born in the aftermath of the DNA analysis and prints as the material Amerithrax letters in October 2001 (and changes when exposed to that level of ©CBRNe World both David Willman’s Mirageman and Dr radiation. Through its successes and Majidi’s Spore on the Grassy Knoll are worth mistakes that case helped shape where we reading), it had a lot of work to do in a are today.” short time. An analogy might be trying to The good news for the forensics team find John Wilkes Booth (or John Bellingham was that while some of the technology for those with more of a UK focus) purely on needed work, some of the tactics, gun/proof marks. techniques and procedures already existed. In retrospect, it is hard to find a better Although it was never designed to be case for CBR forensics to have begun with. A challenged in court, the military had been high profile series of attacks/murders done practising sampling identification of with an esoteric weapon, a mistaken/framed biological, chemical and radiological agents individual, an investigation lasting years and (SIBCRA) for years. This ensured that there finally a suspect that committed suicide – were procedures for the successful collection it’s a murder mystery dream. If, as with the of agents, meaning that a viable sample current crop of CBR attacks (cf Everett could be taken to a laboratory at no risk to Dutchske) the person behind it had been a the individuals around it. chancer or lunatic, there would never have Dr Bannan suggested that it was not just been enough oxygen to have created the at the start of the Amerithrax case that the science. Simpler investigative analysis or military had played a vital role, but good police work would have closed the throughout the development of CBRN case. Had it been a more mundane weapon, forensics, and on into the future too. “We an arsenical or cyanide for instance, it have worked closely with military would never have caught the imagination. components here and abroad. We have
14 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 15
Common approach path
the FBI. The great thing about the what the agent is, but they might not be mean we have to rely heavily on our international CBRN community is its able to indicate the strain, or the investigators as you can’t replace good old willingness to share and that has benefitted concentration of the various elements. investigative methods, putting the shoe to us a lot.” Forensic interrogation needs to go further the pavement, asking questions and utilising It is just as well that the FBI had the start than this. It will want to know what medium traditional forensic evidence that can it did plus assistance from partners, as the the agent has been grown in or exactly what support them and provide leads. The view case load built rapidly. The FBI has the precursors were. All of this provides over years of CBRN investigations was:’How responsibility for all forms of CBRN information based on the methods and much can we exploit the agent itself?’ Now terrorism, ranging from threats through to ingredients used to create the payload, and we have learned that you can’t discount ‘white powder’ letters and finally to viable gives the investigator useful evidence on the good investigative strategy and scientific devices. As such, it had to manage the suspect’s level of skill and the possible support to provide leads in the investigation. enormous case load that followed sources of the necessary elements That has been a lot of our focus.” Amerithrax when the world and its wife and equipment. Another element of focus has been the thought that it would send suspicious The second direction is the ability to development of analytical capabilities within powder to its former spouse/bank extract information from conventional trace the American laboratory response network. manager/high school PE (DNA, soil, cosmetics, paint etc) evidence Except in the rarest cases the FBI is teacher/gynaecologist… either in a CBRN environment or from a unlikely to be first at the scene. Among all the talc, soap powder, plaster, substance that is in itself contaminated. An Instead, local first responders are starch and powdered potato there was example of this might be a fingermark taken likely to have discovered the occasionally something more lethal, and this from an irradiated phone screen, or a sample situation and, should their kept the capability on its toes. Dr Bannan of paint that has absorbed chemical agents. own teams not have the explained: “In the years before Amerithrax Both items are of interest but pose collection the science involved was mostly first challenges or latent threats. As Dr Bannan responder based. The FBI was geared up to looks at these two fields which does he think deal with environmental crimes like the most challenging and rewarding? dumping hazardous waste, so we had to “When we talk about attribution of respond and provide assistance to other chemical weapons (CW) material we can federal agencies. Once Amerithrax opened look at the R&D that is going on in both up we realised we needed traditional those areas. In Amerithrax we looked at forensic investigative support to put behind the components within the spore those kinds of cases and it was eye opening. powders to try to work out how it was At the time we were working the anthrax grown, and which region of the investigation, however, we were also getting country it came from, based on any ricin cases like the Fallen Angel letters. So chemical signatures. Those were while we built the new programmes we had challenges in that case and they no shortage of cases to follow up. remain challenges. We don’t Thankfully, the science has expanded in the have great libraries of all last decade in our law enforcement biological and chemical capability to exploit evidence in dealing precursors , so the with CBRN crimes.” signatures we would The science has had to expand in like are not always at least two directions. The first is the available for ability to forensically interrogate comparison.” samples. Current identification “These types techniques will quite likely tell you of challenges
CBRN Forensics 15 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 16
Common approach path
Sample interrogation is fine, but it needs to be complemented by traditional investigative techniques ©CBRNe World
requisite skills, the CBRN evidence will be and it is also developing further teams that supervisory special agents from Hertu who recovered by local teams mainly composed can assist. can deploy to the crime scene along with of the civil support team, local FBI WMD Dr Bannan explained how the teams scientists from SRU and technical specialists coordinator and local hazmat (for more mesh together: “In terms of the crime scene from THRU, form a team who will give us a information see CBRNe World April 2015). response the forensic response section technical intelligence base and informative These would then take a sample, bag it contains our traditional evidence response capability. Unlike other agencies we don’t according to chain of custody and move it team, which trains and equips all the immediately suit up in Level A and do a up the chain to the appropriate lab. evidence response teams at our 56 field recce and come out. Typically, there is a lot Dr Bannan explained the procedure: “If it offices. We have a cadre of agents called of up front work gathering information that has been decontaminated before we get Hertu who do a job similar to that of the guides our risk based response plan. In the there as someone has taken the initiative to hazardous evidence response team unit, 20 years that the programmes have existed decon it, then the FBI lab can receive it as including training and equipping of our we have only required a level A response at long as it has been tested and shown to be hazardous evidence response technicians at two crime scenes.” non-hazardous. In a real incident, however, our field offices to respond to hazardous In addition to the hazardous crime scene we prefer that samples are not crime scenes. We also have the science response capabilities, the FBI Laboratory has decontaminated. Biological samples go to response unit (SRU) comprising subject developed the Hazardous Evidence Response the national bioforensic analysis centre, matter experts in CBRN, real scientists who Team (HEAT). HEAT is composed of forensic chemical samples go to our partner lab at are deployed to the crime scene to provide scientists from the traditional forensic Edgewood chemical biological centre (ECBC) scientific support. Then we have our disciplines within the FBI Laboratory. The and if it is radiological we have our technical hazard response unit (THRU), who Heat members receive additional training radiological evidence examination facility at come from the first response community in various safety elements of CBRN. For Savannah river national lab in South and are very experienced firefighters, example Heat members will be sent to the Carolina. We have full forensic capability at technical experts and paramedics that can FBI Radiological Evidence Examination all three locations.” support our work at a hazardous crime Facility (REEF), at Savannah River National Yet it is not just the facilities that have scene and provide medical support and Laboratory, for the radworker II course that been upgraded, but also the people working safety officer support. employees need before they are allowed to in them. The FBI has invested in building up “Finally we have our WMD coordinators work in a Department of Energy (DOE) both its hazardous evidence analysis team and our agents in the field office where the facility and similar courses for bio and chem (Heat) and its hazardous evidence response crime scene is. In an incident our deployable are also done other at partner laboratories. team unit (Hertu [pronounced hurt you! Ed.]) assets from the FBI Laboratory at Quantico, They are then given mock evidence to work
16 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 17
Common approach path
on in the labs to enable them to link with healthy cooperation across a range of abreast of them, which is a challenge. together their subject expertise with international partners. As an example he Exploiting CBRN material remains another evidential and safety awareness (this is in pointed to the work the FBI has done with challenge: ‘what can we learn from it that addition to the case work that they will RCMP and their decontamination work and will support the investigation?’ Our goal is already be getting). They get to mitigate the the ongoing relationship with AUSCANUKUS. to provide as much information to our challenges of applying their forensic “We are never complacent, we are always investigators as possible and that is one of discipline to the examination of evidence looking to hone skills further and do a better the things that we will struggle with, not potentially contaminated with CBR job. That is why the participation with the just in the FBI but throughout the law materials. It is not a small undertaking international community is important as we enforcement community. How can we either, there are approximately 60 forensic are always learning. exploit these materials not just for technicians trained up and Dr Bannan stated “Crime scene response is constantly traditional forensic evidence but also the that there were experts queuing up join. evolving, not just for CBRN but also normal CBRN material? It is one of the areas in law “It is a voluntary collateral duty to be on crime scenes, with new tools and technology enforcement and defence which needs the the Heat but they are eager to do it. We coming out every year. We need to keep most sharing.” have more people asking to join the Heat than asking to leave. It is exciting, it gets them into these other labs where they get some additional biological, chemical and radiological training and then they feel good when they can support a challenging case.” So what does the future hold for the FBI and CBRN forensics? In terms of manpower and doctrine it is a shift closer to the crime scene. Due to deployment times, and the potentially volatile nature of the threat, the FBI previously worked in a support role, but Dr Bannan suggested that this might evolve to include triage of evidence. As with any other triage, this facilitates the selection of what needs to be dealt with first. It calls for an impressive understanding of both forensics and CBRN: which evidence is the most important, now, in 10 minutes, or an hour from now? The blood and hair under the victim’s fingernails or attempting to take a viable sample of sarin? “Forward field forensics is a concept that we are now exploring, which allows more triage and forensic science at the CBRN scene. It helps us to better determine what evidence may be contaminated and require transport to a specialty lab and if we are actually facing a real hazard that requires that specialty lab.” What equipment, then, is going to make the difference in the lab or the field? Is it better to have forensic technicians with field deployable mass spectrometry, or is it more valuable to have better libraries for the devices they have? Does stand off detection/identification hold more attraction for CBRN forensic techs? What about the ability to interrogate a hazardous crime scene safely and not disturb vital evidence? Dr Bannan suggested that it was hard, but the future was not lots of bespoke CBRN forensic equipment. “Every year it changes and becomes a little different. There is a plethora of kits out there in the commercial sector and we don’t use a lot of bespoke items. Every once in a while we request a bespoke item, such as a telescoping collection tool where we can retrieve a very hot rad source while maintaining safe distance, but it is rare, it is mainly commercial off the shelf (COTS).” Regarding the future of CBRN forensics, Dr Bannan stated that it was likely to continue in a similar vein to where it started, The FBI is trying to bring more forensics specialities to the contaminated crime scene ©CBRNe World
CBRN Forensics 17 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 18
STUK on the spectrum STUK on the spectrum Johan Sand, of Finnish research institute STUK, published a GIFT funded paper on the stand off mapping of alpha emitters under full light. This is an edited version.
Crime scenes involving radioactive material published a paper on their project success: spectral response characteristics of a PMT have always presented a major risk and a Stand-off Radioluminescence Mapping of are not as prone to visible light as silicon high level of skill and expertise is required in Alpha Emitters under Bright Lighting. based camera sensors. This created their key handling them. This is due, in part, to breakthrough – measurements in limitations in current methods of radiation The detection is based on the optical environments which don’t have to be dark, a detection, in specific for α-radiation, and measurement of radioluminescence light that far more common approach! the equipment available. is produced by the absorption of alpha particles in air. The faint light emission is The STUK researchers said: “This is a key Crime scene investigators in full personal observed in UV wavelengths and this is breakthrough for operative use since the protective equipment (PPE) would managed in daylight, rather than the darkness time consuming total light shielding is not traditionally enter the scene and scan required in other alpha imaging experiments. required. The observed photon count rates manually, using a hand held detector. They verify that a careful combination of detector would have to scan, within a few While scientific grade cameras have been response and optical filtering can enable centimetres, every section of the crime successfully applied in previous experiments, optical alpha particle measurements under scene, to ensure there was either no alpha due to their low noise characteristics and normal lighting.” radiation, or if there was, to identify the good sensitivity to UV light, this project used exact source location. a scanning photomultiplier tube (PMT) According to the team, the idea of using system redeveloped as an imaging system. radioluminesence light for the detection of This is very laborious and time-consuming, The STUK team used an optical system, based alpha particles, has been around for more not to mention laden with risk; it also brings on the Galilean telescope, and constructed it than a century but using it for remote with it the added complication of PPE with using commercial components giving it a purposes has only recently been explored by all its time/physical limitations. To make high efficiency while keeping the costs down. several research groups around the world. matters worse, most regular cameras used The performance of the alpha particle for alpha detection, need to work in a detection was studied using well The GIFT research has concluded that darkened room. characterised alpha emitters at the Institute radioluminesence mapping with a scanning for Transuranium Elements in Germany. PMT system is very affordable compared with As part of the GIFT consortium, researchers a specialist UV camera. It is also more at the Finnish Nuclear and Radiation Safety The researchers reported that one of the key straightforward to use as it doesn’t require Authority (STUK), have achieved a benefits of the new approach was that the light shielding, and can be operated with breakthrough in developing a new approach very little training as it only requires a laptop for remote detection of alpha to work. contamination and have
Bright light! Bright light! STUKs new approach to alpha contamination mapping will reduce the time spent in PPE ©CBRNe World
18 CBRN Forensics CBRNe Forensics vCorrections v2:CBRNe Forensics vCorrections v2 03/03/2017 17:59 Page 19
Search and Identify
Dr Daan Noort, from TNO, on their work to Search and improve identification of CBRN agents and their manufacture Identify Methods to speed up the identification of toxic chemicals used in a CBRN attack on society are absolutely key to dealing with the crime scene and also for treating anyone who may have been contaminated. Even more crucial for the forensics aspect is the ability to identify the potential source of the CBRN agent to help in catching the perpetrator.
The Netherlands Organisation for applied scientific research (TNO) is currently working on Work Package 5 within the GIFT consortium – looking at chemical threat analysis – assessing if people have been exposed to chemical agents. Alongside this, it is working on chemical profiles, looking to develop tools to identify chemical attribution profiles.
Attribution profiles consist of data on the presence of chemical attribution signatures (CAS) which are byproducts from synthesis and impurities in starting materials.
CAS are known for limited sets of chemicals and new knowledge of profiling methods on a set of chemical threat agents would represent major progress. The GIFT project is looking at the development of analytical tools to determine a broad range of hazardous chemical agents in environmental and human samples.
TNO is working alongside FERA (UK), DLD (Belgium), FOI (Sweden), DSTL (UK) and NFI (The Netherlands), to develop methods for the analysis of biomedical samples and environmental samples, focussing on three model compounds: • Phorate – a substitute for nerve agents. • Acrylonitrile – an industrial agent. • Fentanyl – a potent opioid – non- traditional agent.
The decision to use phorate was made in the very early phase of the project. Although some of the partners have vast experience in working with live chemical warfare agents, they considered it easier for various reasons to work with phorate as model compound for a cholinesterase inhibitor.Eventually the organisation wants to end up with a recommended operating procedure for biomedical analysis from a casualty who has been exposed.
CBRN Forensics 19 CBRNe Forensics vCorrections v2:CBRNe Forensics vCorrections v2 03/03/2017 17:59 Page 20
Search and Identify
TNO has also been looking at the impurities In Work Package 3, the organisation also research has shown that unfortunately appearing in fentanyl so it can see worked on detecting agents at a crime external interference can be a problem. indications of how the opioid has been scene – visualising the presence of produced, with the idea that we might then chemical agents on the spot. TNO has been As regards miniature mass spectrometry, TNO be able to say that isotopes from a specific exploring three options for visual has been experimenting with the first Detect batch of compounds are traceable from the identification of some kind of contamination – MMS1000, a field rugged version of an end product. with considerable success: instrument which is routinely used in labs. • Colour reagents. This proved successful and the organisation For example, if the batch at the crime • Metal organic frameworks (MOFs). is confident that all of these technologies scene, compared with a batch from an • Miniature mass spectrometry for could fit well in the toolbox. illicit factory, had the same isotopes, it on-site analysis. would enable the forensics team to prove All three techniques have the potential to a correlation. The results, so far, have It has already seen several successful results help improve chemical detection at the been successful. from the project including successfully scene. A CBRN forensic investigator would demonstrating that colour reagents react take the devices with them to apply these TNO is now developing generic protocols to well with organophosphates and fluoresce techniques on site. For example, they go into the toolbox. So if there is a very easily so they can then be detected would see the colour change and particular compound, for example, the under UV lamps. So far the researchers have fluorescence results and input that data protocol can still be used in the same way had good results testing on pesticides, which into the toolbox, the data would then be as with another compound, so it is quite is a very helpful indication for nerve agents analysed and the relevant information interesting and new and will definitely help as well. Future developments could see this would be sent back. This would generate a the entire chain of a CBRN event. This will work developed into an enzymatic assay. warning that personal protective also enable some work to be carried out equipment is required, or it may show up faster on other chemicals in the future. The In terms of the fluorescent labelling of MOFs, particular areas of the crime scene which spectrum of reference compounds for the this was found to be indicative for the should be avoided due to the strength of toolbox will help to speed up the presence of nerve agents as they detect the the contamination, or where responders recognition of certain chemicals involved in fluoride ions which are found in nerve agents. might need more complex scanners to deal the first response to an incident. While it would be easy to do this on site the with the situation.
The work done on miniaturised MS could have value in the field ©CBRNe World
20 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 21
Before the theatre
Adrien Sivignon, crime scene officer within the Police Before Technique et Scientifique and CONSTOX, talks to Gwyn Winfield about the bolstering France’s capability to identify CBRN terrorists theatre
[This interview was done three days before the dreadful events of 13 November in Paris. Our thoughts and condolences are with the victims’ families all around the world, and we salute the bravery of all arms of the French response system that had to deal with the circumstances of that cowardly attack. We are sure that the French first responder system, described below, will learn and evolve from this outrage to become stronger and more capable than ever. Gwyn Winfield]
There is always a dichotomy at the heart of any civilian CBRN response. Unless the terrorists have done the emergency services the favour of announcing their attack, it is unlikely to become apparent that it is a terrorist chemical attack in the first few minutes. The initial calls into emergency response will most likely resemble those for a mundane gas leak. While police might respond to help with public order, the detection, identification and monitoring task, which will probably give some of the early clues as to the nature of the event, is likely to be a fire brigade (FB) task. This presents a challenge to fire and rescue services of understanding what constitutes evidence and forensic traces, and trying to ensure that they don’t destroy or compromise what might be vital clues. Some nations endeavour to manage this by creating multi-role first entry teams, training fire fighters in forensics or bolstering police CBRN detection capability. There is no right answer, but what there can’t be is an element of ‘we’ll sort it out on the day’. Forensic technicians can’t be expected to don personal protection equipment (PPE) the first time they enter a contaminated crime scene, neither can FB officers be expected to know what constitutes evidence by some weird form of The French CBRN forensic service works closely with the French fire brigades ©CBRNe World osmosis (or watching CSI New York).
CBRN Forensics 21 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 22
Before the theatre
France opts for fire brigade control of Adrien Sivignon, a CONSTOX management use helicopters or planes if needed.” CBRN incidents, they will enter the scene, team member, explained. “Ecully is the CONSTOX, an acronym for investigation in help extract casualties and perform their French police forensic HQ and our heavy a toxic environment, has been around for a detection, identification and monitoring equipment is also there. In addition we have while. The idea was born in 2007, first (DIM) duties. Police will keep the cordon and 70 people spread over the country working in training happened in 2009 and the team once a CBRN terrorist incident has been local judicial police services. They are mainly reached initial operational capability in 2011. acknowledged they will inform the Prime in Paris with the counter terrorist command, The CONSTOX team only deals with Minister who will then activate his and with the judicial police of Paris. In conventional traces (the forensic three Ds - Détachement Central Interministériel (DCI), a addition there are people in Lille, Bordeaux, DNA, data and dactyloscopic traces) in a senior level advisory board with scientific Marseille and elsewhere in France, so if there CBRN environment. The samples of the CBRN and operational assets. CONSTOX is one of is a CBRN incident then the local people will agent will be taken by either the local fire these assets and is a collection of forensic go and make a first assessment, according to brigade (if they are capable) or by military or specialists and investigators trained to go what their FB says and what the CBRN agent scientific assets of the DCI (the Sapeur into the hotzone and recover the evidence. It is. They will make a call to the HQ, ask them Pompier de Paris, 2nd Dragon regiment or is headquartered in the town of Ecully, just to come to the scene and deploy with all the the Commissariat à l’Energie Atomique, the outside Lyon, but has operatives located in a equipment from Ecully. We have trucks that CEA) and this is assumed to have happened variety of major cities and regions. can drive the equipment 24/7 but we can by the time the CONSTOX assets arrive.
Constox is based in the town of Ecully, but has operatives spread throughout France ©Constox
22 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 23
Before the theatre
M. Sivignon explained: “Local people will US readers: think county vs city, ie LAPD vs “Our team is unique in that we build pick up initial information and, once agreed LA county sheriff]. The investigation routes CBRN scenarios and train for them in Ecully. by the operations chief, they make a first are also different, in that the police will use We have done live agent training in Cazaux, assessment and give us information. We are the FB to provide CBRN scene assessment near Bordeaux, to make sure that what we not first responders, we won’t deal with and characterisation, whereas the wrote in our protocols was correct for a live sampling, the FB has the capability to do gendarmerie has its own assets and will environment. Two colleagues have also done that, and we work with them and DCI. The generally keep fire outside. CONSTOX can sampling and identification of biological, investigative part is CONSTOX, for decon it deal with terrorist, criminal and major chemical and radiological agents (SIBCRA) would be the Dragon regiment or local FB, technological incidents, but city and rural training and from all of that we built our for any rad or nuke expertise it is the CEA, law enforcement have to use them for own training for our people. When they and if we need any information we just go terrorist incidents. That isn’t to say that they come here they are trained on CBRN risk through them.” will stop work on other cases where things and how to wear PPE, protocols such as Law enforcement in France is not looked terrorist at the start might turn out to clean man, dirty man etc. We also straightforward. If it happens in a major be something more benign, once they are participate in international training and conurbation investigation is the role of the requested by the judicial authority for a cooperation, so I am an International Atomic police, if it happens in a smaller city or the terrorist CBRN case they are committed. Energy Agency (IAEA) trainer for radiation country it belongs to the gendarmerie [for M. Sivignon gave an example: “We had a crime scene investigation.” case in 2013, it was in an apartment in the The fact that CONSTOX comes in and only south of France where a guy had died. The does the crime scene investigation helps it first responders through the door were the avoid some of the differences in capability local fire brigade, they detected something between different areas. Once the DCI has as they started developing headaches and been activated it might well send decon or had to go to hospital. They sent in a fire DIM support to the affected region/area, but hazmat team that detected chemicals, which since CONSTOX is focused on only one task it were identified as acids. We were called out might be working seamlessly with 20 as this guy was known to be part of a agencies or only one, it makes little terrorist organisation, or at least he had a difference to the day to day. ‘past’. We found a lot of writings in different One question and answer that languages, and we were quite suspicious, but immediately became superseded by events is when we conducted a search we found out ‘what is next for CONSTOX?’ It is hard to see that he was a poor guy and was refilling that the aftermath of the Bataclan won’t batteries with acids. At the end of the day it have an impact on the future business of the was nothing special, but we have not had a team, but it is worth including the original counter terrorist case in France, not even a response as the revised answer is not likely criminal one, since 2011, and hopefully it will to be known for quite some time. remain only training. We participate in a lot Adrien Sivignon’s original response was of local training organised by the prefectures that the team has no desire to build its own in France, so even though we are a national fleet of mobile labs. They prefer to work with unit we do 15 training exercises a year and fixed facilities and are evaluating then real training with CEA, Laboratoire improvements to them. “We have a lab for Central de la Prefecture de Police (LCPP) etc.” chemicals and are currently working on Most of what CONSTOX brings is lots improving our nuclear forensics. We have of experience of doing delicate forensics taken the decision to recover evidence and work in level A suits and other PPE. Much of not work on scene and as such the best job its equipment is traditional forensics kit, and will be done by working in a fixed lab rather its PPE has not been modified in anyway, if than a mobile one. The idea is to build a needed they can grab extra hazmat suits similar lab to the UK’s Atomic Weapons from the local fire brigade. That said, the skill Establishment, with glove boxes etc. We set of the team is high, they are all don’t think that the work on scene will experienced crime scene investigators, rather accomplish the job, you might have quicker than laboratory personnel, and expert in results but they won’t be the best.” being able to defend a trace or activity in a Despite the fact that the recent attack crime scene to lawyer in a court of law. was not a CBRN one it will be interesting “Half of the team is composed of highly to see what lessons are learned from qualified investigators, working counter working such a variety of large intensive terrorism in France and the second half are scenes. There is little doubt, in my mind at forensic specialists. These people are used to least, that future attacks are likely to have working together on conventional scenes, on a non-conventional overlay as well, to non-CBRN things. Investigators take pictures further complicate matters and slow of evidence and all the usual judicial aspects responders. I suggest that so many of the of procedures are taken into account and all lessons learned from Bataclan et al can done in a CBRN environment. While the have a dotted line drawn from them, in gendarmerie has the capability to much the same way that Mumbai and 7/7 decontaminate to take samples of evidence can. We hope, in time, to talk to CONSTOX they don’t have any investigators in their again and see whether we can learn what team.” said Adrien Sivignon. those might be.
CBRN Forensics 23 The Most Flexible GC/MS Now with Real-time Vapor Threat Detection FLIRGRIFFIN® G465 GC/MS
www.flir.com/G465 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 25
Risky Business Risky Business
A lot of the work in the GIFT consortium will So how will it work? Peter Den Outer enable responders to measure levels of The risk assessment tool will be an electronic contamination safely at a scene using the new system of questions, accessed via the from the National technologies being developed. The idea of the graphic user interface of the GIFT toolbox. risk assessment tool is to then take that Once initial information has been gathered Institute for Public information and assess the risk to forensic by first responders at the scene, the officer investigators before they enter the in charge of the forensics team, will access contaminated crime scene. Operatives will need the risk assessment tool and input the Health and the to know the threats they are facing; these can information available, to assess the risk of be from the CBRN agent itself, other hazards harm to the team. Environment on the scene and any general safety risks. The tool will run on a series of yes/no (RIVM), and Govert With CBRN, there is also a risk that while in a questions and will return suggested actions protective suit, the investigator could damage as a result. If, for example, you input the type Verstappen, from evidence as suits make them quite clumsy of agent detected, it would advise on the and cumbersome. Picking up small bottles for correct type of PPE required to enter the the Netherlands sampling can be very tricky when wearing big scene, any necessary respiratory protection or gloves, for example, as they could be dropped skin protection, or a particular type of glove. and broken. Using personal protective Forensic Institute equipment (PPE) to protect from a CBRN The CBRN risk assessment tool would be agent, brings its own risks, particularly in quite versatile and could be used either after (NFI) talk to terms of the personal safety of the wearers, an incident to check on the live issue and as they have a limited time in the suits. give advice, or it can be used if there is a Claudine Weeks perceived risk of something happening. All these elements need to be considered as about the need for part of a CBRN crime scene risk assessment, Why do we need this tool? before a forensic investigator can consider The biggest risk at any scene is the unknown, entering the area. particularly with a CBRN scene. The idea is a specific CBRN that this tool will be very quick to use because Why CBRN particularly? it is specific to CBRN risks. A regular risk forensics risk What makes a CBRN crime scene different assessment at a crime scene can take at least from a normal crime scene is that there is 20 minutes. We envisage that this tool will assessment tool the addition of a whole new level of risk to return a CBRN risk assessment within 10-15 be considered: minutes so it will speed up the whole process. • The risk of exposure to the CBRN agent from the scene. The tool is not a monitoring device for • The risk of exposure to the CBRN agent assisting at the scene. Any change in the from the evidence. environment, such as an active new release • Dealing with and handling contaminated of CBRN agents would be a reason to leave evidence. the scene as it would create a new • Sampling of the CBRN agents themselves uncontrolled situation. for processing. • Working within PPE restrictions. In that case the forensics teams would have • Removing contaminated evidence from the to come away from the scene and do a new crime scene safely. risk assessment starting all over again. These • Decontamination. checks and controls are important in the
CBRN Forensics 25 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 26
Risky Business
prevention of contamination of personnel Equally there could be an ongoing Forensics teams would use information and also to stop them from bringing research project to look at linking up the already gathered from the scene by the first contaminants out of the crime scene. risk assessment tool with the live sensors responders and equipment at the scene, and to provide ongoing alerts and then input data into the tool and work out What about future developments? assessments on scene, but that’s for a the best course of action from there. The idea of the current tool is to help the future work plan. officers in charge to make a decision about It is hoped that by using the tool sending their forensics teams into a crime Currently, the planned prototyped is consistently at CBRN-related crime scene. The tool doesn’t alert you to any focused on forensics investigators and scenes, it will help to educate changes in risk level once you are in there. the idea is to use it in addition to the investigators about the unique risks they But with all the portable sensors being normal risk assessments that would face and will help to make things more investigated as part of the GIFT programme, have already been carried out at the uniform across all European countries, it could be developed further into a risk scene, as it is only focused on the providing a gold standard for all CBRN monitoring tool. CBRN aspects. risk assessments.
Accurate risk assessment at a CBRN incident is possibly more vital than at any other crime scene ©CBRNe World
26 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 27
Hey! I’m trying to eat here!
Hey! I’m trying to eat here!
Karl Harrison from the Department of Engineering and Applied Science at Cranfield University, on the UK’s challenges in forensic response to CBRNE incidents
The challenges posed by the post-event In terms of the challenges, we live in governmental interests, so the same drama forensic examination of a CBRNE incident interesting times in UK forensic service plays out in the world of UK policing, which are many and varied. The response of scene provision. Whilst the Forensic Science Service should not necessarily be regarded as a bad examiners may be limited due to operational (FSS) had nominally been part of a landscape thing, despite how nervous it might make constraints or interventions required to of commercial providers, it’s ‘govcorp’ status some. Show me a state-run forensic ensure safety. To complicate matters further, allowed it to endure swingeing financial laboratory and I’ll show you a four-month forensic response capabilities face another losses month-on-month for years, even backlog for chemical development of set of challenges that have little to do with whilst servicing something like 65% of the fingerprints. Formally estimated analytical the hazardous nature of the scenes domestic forensic market. To put this processes with agreed turnaround times encountered in CBRNE incidents and a lot to business model failure into a wider context, supported by a framework of tendered do with the politics that surround forensic the next two largest (and private held) contracts seems to have sharpened the provision in England and Wales. Some forensic service providers, LGC Forensics and minds and submission practices of scientists consideration of these problems might prove Cellmark, are both viewed by the market as and police forces alike. to be a useful exercise in forewarning the being buoyant and energetic. The former is From the perspective of forensic support responder. Of even more benefit might be developing its current status through LGC’s for CBRNE incidents in the UK, the much some consideration of what value forensic acquisition of Forensic Alliance, whilst the publicised encroachment of sharp-suited intelligence might have in advance of a latter was recently subject to a pricy buy-out privateers may well prove to be something of CBRNE-related act of criminality. Exploring by US-firm Labcorp. a paper tiger, having a relatively limited current structures to find solutions in So just as more mainstream CBRNE effect on the practicalities of submitting advance of catastrophic events can surely concerns grow more accustomed to the exhibits for analysis after the fact. It may yet only be a good thing. interface between commercial and mask other, more pernicious risk such as the
CBRN Forensics 27 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 28
Hey! I’m trying to eat here!
cultural and political disconnects with long are required. It is culturally easier and engage in concerted research efforts, they pedigrees in UK policing that might detract politically more expedient to equip rarely target scene-based disciplines as from our ability to offer a comprehensive warranted police officers, frequently drawn these are generally peripheral to their core and co-ordinated response to such incidents. from search serial units, to respond to these business model of bench-based forensic specialist scenes, despite the fact that over analysis and are hard to cost and resource Plus ça change: Police versus Scenes of the past decade, many such officers have in a sector dominated by high-volume, Crime Officers had very limited exposure to developments quick-turnover and fixed-price services. Notwithstanding changes to laboratory in forensic science or current thinking on structures, the management of forensic the creation and implementation of a Watching the detectives: intelligence investigation within English and Welsh strategy of forensic scene examination. The versus evidence police forces has enjoyed and endured police CBRNE responders are well trained Whilst the domestic security services massive and unprecedented cultural and and equipped to stand alongside other such routinely conduct forensic examination of scientific change over the past decade. I specialists but they are not the best people scenes on the basis of intelligence received, began my career as a civilian Scenes of in their services to manage the complex and military intelligence gathering has Crime Officer (SoCO) in 2001. In some more forensic investigations required. That is developed to accommodate field-based stable sectors of public service, this would likely to be a civilian crime scene manager analytical techniques, neither has yet fully not be seen as a great span of time. Indeed, or co-ordinator who may not even have grasped the potential offered by forensic had I been recruited as a police officer then been considered for such a role. intelligence exploitation. The stakeholders and reached my twelfth year of service, I that might be best placed to assist are might just about qualify for the term ‘mid- Knowing my place: scenes of crime hampered by a range of issues and civilian career’. But not so in the world of crime officers versus forensic scientists SoCOs are largely excluded from any such scene investigation. Here I feel old enough In addition to a cultural divide between intelligence-based activity. Experienced they to be played on screen by Peter Ustinov, warranted police and SoCOs, a similar one may be, but their deployment is almost hobbling around an ivy-choked Lincoln exists between SoCOs and forensic wholly reactive and investigative rather Memorial. In 2001, scenes of crimes were a scientists. Whilst SoCOs are trained and than intelligence-led. The forensic service trade shared pretty much in even numbers developed as general practitioners of crime providers are largely focussed on bench between civilians and detectives. Some scene examination and exhibit recovery, analysis and their close involvement in forces, such as West Midlands Police, have their ability to interpet complex scientific forensic intelligence exploitation might be been early adopters of the civilianisation of evidence on the crime scene is limited. Fire hampered by the high-throughput nature of SoCOs and featured a relatively small and explosive damage, blood spatter their business models and the number of warranted officers still in the patterning and the excavation of buried customer/provider relationships that role. Other forces, notably Gloucestershire human remains from individual or mass dominate their work with police and and Essex, resisted the appointment of graves are all examples of the sometimes security services. Academic institutions civilians to SoCO roles well beyond 2001. vital evidence types that are impossible to professing interest in forensic science are, This may seem about as relevant to seize and export from the crime scene. in most instances, hampered by their CBRNE response as a Latin lesson, but bear Should they play a role in the examination concentration on undergraduate teaching, with me: this is the beginning of a fault line of a CBRNE crime, in the interpretation of as well as lack of time and resources to that is still playing out today. post-blast fire damage or the recovery of invest in extended research. Civilian SoCO respond to reported crimes, human remains buried following a examine scenes and interact with the chemical weapon attack, we currently lack Is this as bad as it sounds? public, more often than not these days a comprehensive system of response. This Categorically not, I believe. The UK whilst wearing a uniform not dissimilar lack stems from a disconnect between possesses all the elements required to be a from that of a warranted police officer, professions rather than any world leader in terms of both the forensic driving a marked-up vehicle and carrying a insurmountable obstacles. intelligence exploitation required to combat chirruping airwave radio handset. They do the risks of CBRNE incidents and the not take statements, make arrests or The brains trust: Research versus practice specialist forensic techniques required to respond under blue lights, but in any other If the practice of forensic examination and examine such scenes following their use. sense of the term, they are very much scientific interpretation on the CBRNE crime Despite recent cuts to police forensic ‘front-line’. Despite this exposure, SoCOs scene raises a number of issues of specialist budgets nationwide, we still possess a large lack any routine form of police protection: resource, the research required to improve number of highly-trained SoCOs, an no stab vests, no CS gas, no baton and no this situation is much the same. It was energised and well-financed stable of protection training. The reason for this is suggested in some sections of the press that forensic science providers and a university because the SoCO occupies a strange little the demise of the FSS would herald the end sector led by a small number of the highest twilight zone of police policy: to equip a of forensic science research in the UK. quality research institutions that would SoCO to deal with hazards is to admit that Whilst I don’t believe this to be the case, it happily facilitate this work. they face them. Give them no mitigating is certainly true that the remaining The challenges outlined here are largely equipment or training and you can continue providers are in the process of adapting to tribal in nature and are eminently to treat them as if the level of risk they engage with forensic science academics in a surmountable. Tensions between the roles face is the same as any other police- constructive manner. Worse still, of police CBRN responders, civilian SoCOs, employed civilian. government-directed science, as funded forensic scientists and university It is into this twilight zone that CBRNE through the Research Councils UK, has so researchers currently compromise our scene forensics falls, along with an far allowed forensics to plummet so ability to develop a comprehensive forensic interesting, mixed bag of anomalous crime comprehensively between its various stools response to CBRNE risk, but the scenes including hazardous materials that academics have been forced to direct methodological advances of the last ten handling, scenes at heights, scenes in their creative energy into devising newer years that represent routine best practice confined spaces, scenes in water and, to a and more agile ways to avoid use of the ‘f’ on the standard major crime scene are great extent, mass fatality scenes where word in research grant bids. readily adaptable to CBRNE intelligence disaster victim identification (DVI) protocols Where the forensic service providers do and scene response.
28 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 29
Hey! I’m trying to eat here!
CBRN Forensics 29 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 30
Analyze This!
Analyze This!
30 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 31
Analyze This!
Michael Madden, CEO of Analyze IQ, talks to Claudine Weeks about getting more information out of existing samples
Using miniaturised sensors to detect CBRN example, the sensor will produce a graph, we investigator could do the chemometrics on agents at the scene is just one step in the will then automate the analysis of the data a Raspberry Pi and then stream it to toolbox journey being explored by the GIFT within that graph, which will enable the another computer so they could even have consortium. The aim of this project is to bring commander to make better decisions. someone viewing it at home live, should all the component parts together and Analyze that person be on call as part of the IQ is working on the second step – providing If, for instance, radiation is detected by a incident management. immediate analysis of sensor data to help sensor at the scene, that information will be those on scene with their decision making. analysed and, via the toolkit, advice will be Any information from detectors or devices provided on which PPE to put on or what at the scene will be stored securely and Michael Madden, CEO of the Irish company procedures to take. It all fits into the data made available to those who need it. It’s explains: and supplies vital information to the scene. about presenting information in a usable fashion via a good user interface. At Analyze IQ, we already have the world’s The advances in miniaturised chemical most advanced analytical software for sensors that are explored within GIFT, and There are some procedural questions still spectroscopy data, including algorithms that elsewhere, open up massive opportunities in to be figured out but we can enable work well with mixtures and complex data chemometrics and provide interesting options sketches and scene photographs to be for library software. Within the GIFT project, beyond CBRN forensics. Chemometrics is an captured by the tool box from a technical we are developing: analysis model which uses hundreds of point of view. We are still working on a • Data Communications protocol – variables to allow a non-expert to extract protocol for how this would all work and structured messages sent securely over the data from a sample that, in our case, would how to store information from the first internet. usually only be available to an expert in the responders which may not be admissible as • Information hub – to route the messages lab. The experts can build the models and the evidence. Every piece of data in will have as needed. This takes all the messages from knowledge on the software system we are data stamp and time stamp on it for the the sensors and sends them through to the creating and then the information can be chain of custody. analytics service. used out in the field by non-experts. • Analytics service - performing While working on the analysis side of the chemometrics and/or library searches to We are trying to ensure we can get toolbox, we are collaborating with Space analyse the sensor data received into the chemometrics information directly to the Apps who are developing the graphic toolkit. scene. For example, a Ramen detector will interface for the people who will be using send the data to the analytics hub and then the toolbox, and also with Nanobiz who are We are working with the Belgian company, the research will be carried out through creating the information hub which will Space Applications, and the Turkish company, chemometrics and library searches, and the store all of the protocols and operating NANObiz in Work Package 6 (WP6), to create results will be sent straight back to those on procedures. The three companies working the information system part of the toolkit. the scene. Even if the chemicals are 50/50 together, will create the software aspects This will take data from all the technical tools mixtures or even 10/70/60 mixtures, which of the toolbox, ready to connect to the being developed, and turn it into useful is when most library searches would fail, our physical sensors and take the data they decision making information at the scene. chemometrics system can come in and get a supply from the scene, to turn it into useful result in a few seconds. information to help support decision- The added value we provide is the analytical making. The vision, post GIFT, is to try to software – pattern recognition, labelling the End users can run the chemometrics directly commercialise the system for people to use information in real time and adding on small mini processors, which is a out in the field once the principles have functionality into the sensor data. For significant feature of this GIFT project. An been proven from the project.
CBRN Forensics 31 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 32
Austria’s take on CBRN forensics Austria’s take on CBRN forensics Austria’s collaborative approach to CBRN forensics is paying dividends. Guenter Povoden, head of section, chemistry and development at the Austrian armed forces’ CBRN defence school talks to Claudine Weeks about the achievements and challenges
CW: What makes Austria’s approach to to develop SOPs (standard operating are clean, they can go on to the normal CBRN forensics outstanding in Europe? procedures) across all of the branches so forensics lab, or if they are contaminated a GP: Over the past two years, the Austrian that we have a procedure to follow if a CBRN forensics expert can work safely on armed forces have improved cooperation CBRN expert joins a military police team for the sample directly in this container. and interoperability between forensics an incident, or if an EOD military expert is The ideal would be to attach the experts and other military units, by offering called out. The culmination of the past container to the JDEAL and work with both forensics training for specialised CBRN and couple of years of cross-specialism training at the scene of an incident. You would use explosive ordnance disposal (EOD) experts so will be a finalised CBRN EOD doctrine which the sample control container to assess the they understand what is required. is due to be published very shortly. contamination of the samples, and then use Our sampling and identification of the JDEAL lab to work on the evidence on biological, chemical and radiological agents CW: What else makes Austria stand out? site, a highly sophisticated screening tool for (SIBCRA) teams were already able to sample GP: We are assessing some state of the art unknown/CBRN samples. in very professional ways under CBRN equipment for the identification of conditions, so we have been working to link explosives. The same equipment is used in CW: Can you explain the composition of forensics teams with our SIBCRA teams to other countries and we are planning to your CBRNE forensics team? share knowledge. harmonise the data, especially with GP: We have no dedicated CBRNE forensics Special investigators from the military Germany, which will enable us to detect team per se but with our cross operational police, EOD personnel and the weapons patterns in explosive composition, but we skill set we can tailor make a team for any intelligence teams (WIT) have all been are at the very early stages of this project. incident. That’s why it’s so important to trained in forensics and share their We are also participating in the JDEAL have the cross force integration and knowledge with the CBRN specialists. All the project – the joint deployable exploitation skills training – it ensures everything experts understand each other and the roles and analysis laboratory - located in The comes together. everyone plays in any incident. Netherlands. It is a level 2 WIT in theatre The challenge, however, is to make sure Our EOD personnel are also trained to laboratory capable of screening fingerprints, the teams all speak the same jargon and make sure they don’t destroy evidence as exploiting electronic data and has an language so they all understand each other’s far as possible when dealing with the explosive analysis capability. There are two roles. Special investigators from the military devices, although their priority is to render labs, one for training and one for police for example could identify which is devices safe. The WIT teams also share deployment to the scene. We will continue the best fingerprint powder to use in a their knowledge with CBRN experts as they to participate in this next year, to look at CBRN environment. It’s all about learning will be dealing with post-blast scenes and forensics in theatre. each other’s procedures as normal powder need to know what issues they may face We have also been working on a sample would go everywhere and spread from explosives. control site container with a containment contamination. A forensics team with some It’s all about interoperability between the system for bio/chem hazards that can CBRN knowledge would know to use EOD teams, military police and the CBRN handle contaminated samples and secure magnetic fingerprint powder whenever specialists. We have been working together them properly. Once we know that samples possible to avoid the contamination issue.
32 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 33
Austria’s take on CBRN forensics
Weapons Intelligence Teams, CBRN experts and forensic technicians all need to work together to create a military CBRN forensics capability ©CBRNe World
CBRN Forensics 33
CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 35
Austria’s take on CBRN forensics
The forensics team also needs to GP: Civilian CBRN forensics procedures found in Germany which contained sarin, understand the CBRN side, for example the should be similar to those of the military so there was genuine concern. clean/dirty man protocol on how to as it’s all about preserving the evidence We worked with the police to assess if it approach possible contamination. They and safety. The only main difference on the was part of a crime - had it been hidden need to know that within a CBRN incident, military side may be time constraints. there by someone for use later, had it been the sampling won’t be done by them but Within a military scene we may need to dumped, or was it an old container left by the SIBCRA teams, but under their gather evidence very quickly in case the over from the war? None of this was supervision. So the forensics expert can enemy is coming onto the scene, so we apparent. But our team had to think about advise on what needs sampling and why, would have emergency processes for all the options and possibilities and deal and the SIBCRA team has the skills to do it that scenario. with the container accordingly. in CBRN safe way. In case the forensics The time constraints and pressure on a This incident was a good example of specialists are taking or preparing a military team would be different; they cooperation between EOD, CBRN sample, the procedure will also follow the would need to know how to prioritise what specialists and civil authorities: The police clean/dirty principle. is needed as they may have to leave a lot called the CBRN specialists who checked of evidence behind. The military need to the container and the environment for any CW: Do counter IED operations and make the right decisions about which contamination, the EOD assessed it training naturally lead to CBRN samples and evidence to grab and take regarding explosive threat and took x-rays. forensics? Is that the best way for within a very limited timeframe. We clearly could see that there was some people to start? The principles, however, would still be liquid inside and after the container was GP: We are very much involved in counter- the same in terms of documentation to secured, the civilian police escorted it to a improvised explosive devices (IED) work link evidence to the scene, appropriate specialist laboratory where the CBRN and we try to include CBRN related issues photos, recording everything in context experts took a sample with specialist on a regular basis within this. We hosted a and ensuring that chain of custody is drilling equipment. CBRN search course for the European always consistent. So police and military worked together. Defence Agency last year and are working It worked well as cooperation between our on the implementation in the Austrian CW: How do you put together a training EOD people, the police explosives people armed forces, looking at military search programme for CBRN forensics? Can you and our CBRN expertise. operations carried out under a CBRN go to civilian authorities and ask them environment, or searching for CBRN hidden to teach you, or do you need to start CW: What do you see as the major weapons caches. from scratch but to a known (although challenges for Austrian CBRN forensics We are also now writing up a concept legally justifiable) goal? specifically and CBRN forensics paper on CBRN search as we want to GP: The military police already get training generally? define and develop this very specific from the civilian police in Austria. They do GP: In Austria we don’t have a lab capability a lot further. It crosses over with a couple of months of training and are accredited to the Organization for the intelligence, CBRN, EOD, laboratory and also invited to spend time with the civilian Prohibition of Chemical Weapons (OPCW), technical intelligence. It’s very important forensics teams to shadow them in real life but our military lab is capable of here to have a solid chain of evidence in while working out in the field. confirming the identity of chemical place for the forensics side as ultimately They get full training with the civilians. warfare agents. We also have a very good the information will be used to prosecute, We need to get training and accreditation military bio lab, it is a biosafety level 3 so all the documentation has to be perfect. so that we can go out and support in other plus lab. The challenge is getting In Belgium and France they did countries. The first military police special information updated. Classical chemical numerous house searches and other search investigators have received basic CBRN agents are not the problem, the challenge operations after the recent incidents and training and recently they took part in a is new substances coming through which they have well established military and live agent training exercise with us. we have never seen before and civilian search protocols already. Within identification of all the toxins may be military search, information gathering and CW: What experience have you had challenging. Things which affect the the collection of forensic evidence are very with forensics? body, like nano-materials may appear in important. We need this capability right GP: A few years ago we had several future. We always rely on database across Europe and to be able to share it potential anthrax cases, which involved information to help us identify agents so with military and civil responders. It makes our unit. That was before we had the we need to keep it constantly updated sense for the military to share their help current CBRN forensics capability and and share information. and skills with civilian authorities. looking back, the way we handled that In general, the challenge is that most There are different IEDs and different case really helped to shape how we are nations are not open in sharing networks now, compared to Afghanistan for working now. The incidents actually turned information on forensics. More information example, but the threat is still there. It won’t out to be hoaxes, except in one case, but sharing and cooperation across different die out, it’s just that the paradigm and scope the experience of handling and working on countries is needed. Information should be changes. We already know that terrorist them was invaluable for getting to where shared more quickly and more openly, but organisations have used chlorine and we are now. national procedures often restrict that mustard gas so we need to know how to deal In Austria, forensics is mostly the between countries. with them should they come into Europe. responsibility of the police – the military The other key challenge for CBRN only have a supporting role but if it is a forensics for the future is when evidence is CW: Are there elements of CBRN CBRN incident then they would largely rely really heavily decontaminated - at the forensics that are of no interest to the on us (ie CBRN specialists of the CBRN moment you sometimes have to accept military, or does the need for attribution defence school and the CBRN companies) that the evidence is gone and that’s that. and prosecution mean that there should so that’s where we would support them. A Being able to decontaminate items without be no difference in scene processing? couple of weeks ago we were called out to losing the evidence is really challenging, That military and civil CBRN forensics help with a suspicious container found in but is an essential focus for the future of should be identical? some woods. It was very similar to one CBRN forensics.
CBRN Forensics 35 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 36
Collaborative Effort Collaborative Effort
Work is now well under way on the element covered, but DLD views this as a They have already done CBRN sampling and development of three training exercises for chance to learn how to deal with traditional there is a current need for sampling of the Generic Integrated Forensic Toolbox forensic traces (DNA, data and dactyloscopic traditional forensics as well; it’s a great (GIFT) programme, whereby the protocols, elements) in a CBRN environment. opportunity but a lot of work. This procedures and some of the technologies, operational capability gap is one of the will be put to use for the first time under Mrs Katleen De Meulenaere, CBRN technical reasons we are in the GIFT project, it is an field conditions, to assess and provide proof manager at the lab, and lead for GIFT, excellent chance to work with specialists and of principle. explained: “The forensics part will be an people in forensics. “It means that we can extra task for our current SIBCRA teams. work on a European level as well as a The first exercise, to be held in the UK in December 2016, will involve a radiological/nuclear scenario, while the second one in the Netherlands will focus on a salmonella poisoning to explore the bio aspects of the project. Defence Laboratories (DLD) in Belgium, is currently planning the third and final exercise for early 2017, which will test the chemical aspects of the CBRN forensics toolkit, using the discovery of an improvised chemical warfare laboratory as the setting.
Belgium was one of the first European countries to develop a CBRN sampling and identification of biological, chemical, radiological agents (SIBCRA) team, an expertise that has since spread to its Gallic neighbour and the rest of Europe. Historically, while the US adopted CBRNE, the division between explosive ordnance disposal (EOD) and CBRN remained strong in Europe. Belgium, however, was among the first countries to start knocking that door down, and was a constant feature of NATO Response Force (NRF) CBRN rotations with its EOD unit. Now it is increasing its effort in forensics, a logical next step after providing SIBCRA and CBRN EOD teams.
Belgium is currently looking to roll its two full time SIBCRA units into SIBCRA/forensic units. DLD is an active member of the GIFT consortium (www.giftforensics.eu), which is researching, and in some cases delivering, the next generation of CBRN forensics in Europe. Engagement with this project is allowing DLD to look at the various elements involved, and see what can be utilised for its own needs. Once you have a SIBCRA capability you have a great deal of the CBRN
36 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 37
Collaborative Effort
Lt Col Martel and Katleen De Meulenaere, from the Ministry of National Defence in Belgium, talk to Gwyn Winfield about developing their forensics capability
national level, as we can collaborate closely scientists incorporated, while DLD itself Lt Col Martel, DLD’s commander, explained the with other GIFT partners such as the NICC comprises full time scientists and military make-up of the organisation. “We have three (the Belgian forensic research lab). It is a personnel with scientific backgrounds. The technical departments. Katleen is head of the win-win situation,” she said. split is about 50/50, which allows a great CBRN department which has five labs. There is deal of understanding and knowledge to the protection lab focusing on personal Direct linkage of research to operational build up in the team, and provides a protective equipment (PPE), Colpro and army units is not unusual for DLD, as it greater understanding of operational decontamination. The detection and sampling views itself as an operational unit. The matters when it comes to offering CBRN preparation lab is deployable; its people can SIBCRA units in the army have DLD advice to commanders. take samples, mainly in the area of environment and health and safety but they also do the sample preparation for Organization for the Prohibition of Chemical Weapons (OPCW) proficiency testing, for example.
“We have the rad and nuke lab, which provides logistical support for all the dosimeters of the military staff, operational and medical services. They have a lot of sources and we can test detectors, so we will test the GIFT detectors. Then there’s the chemical analytical lab which is focused on unambiguous detection of CWA compounds but also experienced in the identification of things like heavy metals and environmental issues.
“Finally we have the federal orientation lab which receives suspect samples for screening and dispatch. We do a lot of testing but also give a lot of advice to the military and sometimes to first responder departments.”
Katleen de Meulenaere sees the collaboration between national and international agencies as a massive benefit from the GIFT project and that these links will be maintained and even increased in the near future. “In terms of the CBRN lab it is important to have enough flexibility to see how we can help build new capabilities since we live in a changing world with changing threats. We have to try and collaborate more intensively with civil departments; it is becoming specialised, complicated and detailed so we will need to actively inform each other to foster sharing. This is also true in a Nato context, the development of a network is very important. We should go on participating with Nato, OPCW and in other international contexts, as it is necessary to work together to provide answers to tomorrow’s threats.”
CBRN Forensics 37 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 38
CSI2: CBRN Crime Scene Investigation
CSI2: CBRN Crime Scene Investigation
©OPCW
38 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 39
CSI2: CBRN Crime Scene Investigation
Dr Randall Murch,* professor at Virginia Polytechnic Institute and State University, on considerations for success in preparing for and initiating CBRN forensics programmes
Twenty years ago, the FBI created the world’s support. Duplication of programmes and recognised as legitimate disciplines. first forensics investigation programme for effort would not be supported or acceptable. Developers and practitioners are committed weapons of mass destruction (WMD) Relationships, shared missions and to incorporating forensic requirements and founded on the following principles, realities responsibilities had not been recognised. expectations into research, development, and vision: • WMD forensic investigative programmes validation, transition, practice, • Forensics and attribution had not yet been would have to integrate appropriate communication and quality management to recognised as a critical component of the traditional forensic disciplines, to maximise ensure effectiveness, robustness and national counter-WMD programme, but in the gain for WMD investigations, operations confidence for customers and stakeholders at time it would be. While not all threats and and intelligence gathering. Traditional all levels. illicit plans and actions can be prepared for, forensic collection and analysis involving Nuclear (radiological) and chemical anticipated, prevented, thwarted or mitigated, evidence potentially contaminated with very forensics are well established through long- a robust investigative capability leading to hazardous materials would require specially standing nonproliferation programmes while attribution, including through forensic trained personnel, specialised equipment and biological (microbial) forensics is maturing as support, should be implemented. methods, and facilities that could a discipline. It is well realised that the three • Law enforcement had neither fully accommodate it. are not the same for many legitimate reasons recognised nor assumed a broader role in • There were narrow and disjointed and have to be treated differently. Actual WMD investigations and prosecutions, nor interagency constructs for cooperation, many case evidence has been subjected to assumed its rightful place as the leader and barriers existed to the creation of an effective respective analyses and legal, policy and national integrator for the desired national WMD forensic enterprise, certain command decisions have been made and investigative, operational and forensic required agencies were not involved, and no actions taken as a result. There has been programmes, even though existing laws one was clearly in charge. much collaboration between the US and would have permitted it. • Significant gaps and shortfalls existed certain other nations on WMD forensics in • Major special events, such as the 1996 across the board, from the tactical to the areas such as programme development and Olympic Games and national political strategic levels. preparedness (training), evidence collection conventions, presented WMD targeting • At the time, forensic investigation was and analysis technologies and methods, opportunities for adversaries. The US had a generally thought to be an after-the-fact exercises and decision support. woefully inadequate forensic response endeavour, but the vision was materialising Peer reviewed papers are published in the capability. While certain smaller scale nuclear that, in reality, the value of forensic open literature when possible, which and chemical threats and events could be investigation is much broader in scope across strengthens acceptance of and confidence in dealt with in limited ways, larger scale investigative process and the ‘business cycle’ the underlying science and its applications. threats and events could not, and events of perpetrators and persons of interest. Other nations have realised the value and need involving biological threats would not have • The threat of C, B, R and N terrorism and for such capabilities and established their own been at all. proliferation had increased, particularly programmes which are tailored for their own • National-level capabilities in various through what was being projected as loss or purposes, while still more are considering such. agencies existed for nuclear pre and post redirection from unsecured WMD weapons While, forensic analysis and attribution is blast analysis, chemical weapons analysis for programmes and what was being learned recognised, accepted and used to support military and nonproliferation purposes, and from the pursuit and use of WMD by sub- nuclear and chemical weapons nonproliferation legacy bioweapons programmes but none of state and apocalyptic groups. investigations and outcomes, the discussion has these were organised, staged, purposed or been elevated to the appropriate international resourced to robustly support forensic These are still instructive today, whether fora to similarly incorporate biological weapons investigation which informed legal, policy, prospectively or retrospectively. forensics and attribution. operational and other processes, decisions, Since 1996, much has changed. For Based on his own and colleagues’ actions and outcomes. Vertical integration example, the US has and continues to invest experience and many ‘lessons learned’ over (federal, state and local) was nonexistent. in a fully integrated multiagency and the past 20 years at national and • The capabilities that existed then, could multidimensional programme. This continues international levels, the author offers some not and would not have withstood rigorous to evolve to address emerging threats, thoughts for those who are just beginning to adversarial review of the science, technical opportunities, mission areas, and consider or have begun instituting a CBRN interpretations and conclusions as would be existing and new requirements, how response forensic programme. expected in a US court of law or on the world and coordination will manifest and what is • First, ‘ready, aim, shoot’ as modus operandi stage if forensic investigation and analysis needed for decision support. The US is vastly superior to ‘shoot, ready, aim’, for supported US allegations or actions against a government has prioritised that holding both short term and sustainable success. Two suspected perpetrator. adversaries at risk and accountable through good starting points are understanding, • The US required programmes for C, B, R attribution is a critical component of national validating and aligning requirements of and N that drew on existing programmes and counter-WMD capabilities; national customers and stakeholders and conducting a assets in various agencies, which were strategies, policies and authorities are in systems analysis to understand: where are assigned to related missions that could be place. Nuclear, chemical and weapons you are, where you need to be by when, and leveraged quickly and well for forensic forensics have been firmly established and how are you going to get there?
CBRN Forensics 39 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 40
CSI2: CBRN Crime Scene Investigation
Understanding requirements should adjudication processes are also required. weaknesses, gaps and opportunities. include how forensic science does or would Senior policy leaders and commanders • Third, one should not assume that existing contribute to decision making in pertinent questions before, during and following an forensic laboratories have the infrastructure, government agencies and processes. CBRN attack can include: What is or was it? How resources and personnel with the formal forensic programmes require substantial bad are the effects, and how much worse will training, knowledge and expertise to properly investment in personnel, science and it get? Who did it? Is it from a programme or and safely conduct and effectively technology, consumables, equipment, labs we know about? Will there be more communicate CBRN forensic analyses, results infrastructure, transportation and logistics, attacks? What are we and the nations and interpretations. Dealing with very training and exercises and unexpected involved doing about it? What can we know, hazardous materials and associated evidence expenses. Unless resources are unlimited, a by when, and with what confidence? requires special expertise, certifications, carefully thought through and executed Forensic science and practice can contribute equipment and laboratory configurations, strategy and plan with risk management to informing most of these questions. safety considerations, evidence logistics and options is helpful. Further, it should be Investigators, prosecutors and operational preservation and storage. accepted that there will be a substantial up commanders’ questions can include: Did a Further, it should not be assumed that just front and continuing resource investment crime/event of interest occur? What because someone understands nuclear for a capability that is fundamentally for happened? How did it occur? When did it weapons materials, design and effects, or rare events. occur? Where did it occur? Why did it occur? chemical weapons decontamination, • Second, forensic capabilities must Who was involved or is responsible? What transport or analysis, or the diagnosis and effectively inform questions that customers evidence exists? What does it tell us? How effect, or the genomics and bioinformatics of and stakeholders pose or need answers to, strong are the links? How reliable and highly pathogenic microbes they necessarily even if situational awareness changes and credible is the evidence? What alternative understand forensic requirements, processes the fidelity of the answer which can be explanations are there for the evidence? Can and expectations. Exploiting CBRN offered increases with time, otherwise the we defend our conclusions and actions? contaminated physical evidence for value is suspect or, and even if provided, will Forensic science contributes to answering traditional forensic results of investigative or be discounted. Forensic science can all these questions and can provide intelligence value (eg, latent fingerprints, contribute to answering most of these essential, independent information that human DNA, documents, digital media, trace questions. However, it is unlikely that science strengthens the quality and confidence in evidence and materials) requires alone will be sufficient in quantity, type and the answers. For planned or new CBRN/hazmat trained forensic personnel, and quality to fill all or sufficient gaps in programmes, objective assessments should specialised instrumentation or equipment, knowledge that are required to make be conducted to determine how well methods, safety programmes and facilities. decisions or take action with the confidence existing CBRN forensic capabilities can, or • Fourth, evidence collection should seek required. Competent investigative and planned capabilities could, address these only that of probative value and maintain intelligence capabilities and mature sorts of questions, including strengths, integrity and accountability. Analyses
Exploiting CBRN contaminated physical evidence for traditional forensic results requires CBRN/hazmat trained forensic personnel ©CRBNe World
40 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 41
CSI2: CBRN Crime Scene Investigation
performed on CBRN evidence should be preparedness, response, resource leveraging parallel capabilities are often present in properly validated, accurate, reliable, and command, control and communication civilian forensics, public health, agricultural repeatable and defensible. The science and should be carefully considered. If one rolls up and environmental agencies, specialised practice being performed should match the everything that would be required or needs to national laboratories, and military medical outcomes being sought, and stay within the be accommodated from what the author has and CBRN programmes that can be leveraged bounds of what the science is capable of. communicated thus far, for most if not all and knitted together, then staged, prepared Validation of methods and protocols should countries, more than one agency has the and maintained or called up as required. meet forensic requirements, which necessary expertise, resources and facilities. • Adversaries, the nature of threats, possible incorporate legal and other priorities. The Thus, to maximise return on investment scenarios and threat presentations, and attributes and limitations should be and minimise duplication of effort, the best access to advancing technology and understood by the performers and of various agencies can be fitted together technical knowledge changes all impart communicated so that consumers of forensic under the command and control of a single required evolution, adaptability and agility to information will factor these in as part of agency or interagency leadership council. CBRN forensics programmes if currency and their decision calculi. Further, if any one nation cannot afford effectiveness is to be expected. As a The expectations of customers and everything it has decided it needs, bilateral or framework for thinking about managing stakeholders, most of whom are not multilateral partnerships could be considered. change, one should contemplate the scientists or otherwise experts in these fields, This might require creative and patient potential, which is not a bridge too far, with should be integrated with the components of negotiation on several levels but could be respect to biothreats and dual use forensic investigation, from scene worth the investment of time and energy. technology and knowledge. Today and investigation through reporting. It is prudent In any case, engaging with countries that looking ahead, not only will bioforensics to ensure that this in place before evidence have successful programmes and have been programmes have to address current threats is collected, processed, analysed and reported down this road already, would be valuable at and challenges, but those potentially created on - and not afterwards - though some the start or at specific points along the way. or influenced by the realities of rapidly situations can be accommodated if the use This will save time and manage resources, advancing and universally available, of the science is limited. In the US and maximise performance and increase the legitimate life sciences capabilities that can elsewhere, the capacity of forensic science to likelihood of a successful and sustainable be redirected for illicit purposes. withstand withering external scrutiny, such outcome as desired. For many reasons and Nefarious uses could derive from powerful as in a court of law or a high stakes policy realities, CBRN forensic programmes are more genetic engineering technologies (eg CRISPR forum is extremely important. If these complex in a number of dimensions than they genome editing), improved bioprospecting requirements are not met, the entire system initially appear to be. and exploitation of natural diversity, very is at risk for loss of value and impact, Finally, here are some considerations, small footprint biodesign and production independence, confidence and utility. which new starters might contemplate for systems (eg DIY), creative denial and • Fifth, for best value, CBRN forensic early design and implementation and which deception, and synthetic biology. Biodefense capabilities should be scalable and adaptable will help define how choices and investments programmes are becoming aware that they to the types, range, dynamics and might be made: will have to become more agile and adaptive uncertainties of the scenarios that the • A competent CBRN forensics programme is to develop and make available measures to performers and beneficiaries expect to a major up front and enduring investment. It prevent, thwart, protect and recover from encounter. One effective approach towards a encompasses personnel (specialised new threats. The same is true for the desired end state is to use a set of realistic credentials, knowledge, skills, abilities and bioforensics component. scenarios in tabletop and field exercises. possibly incentivisation), specialised training The future presents many challenges These scenarios might bracket very small and exercising (unit, sector and enterprise), indeed, and may, perhaps, seem scale and focused events and a large scale, equipment, consumables, logistics, field, overwhelming. Proper prior planning and massive impact event or one for which a laboratory and staging infrastructure and thoughtful, step-wise, ‘lean-forward’ combination of CBRN threats has been operations, safety, and knowledge implementation to the desired end is a presented or the adversary has used creative management, and decision support to name a prudent approach, however. Fully tactics, techniques or procedures. few. Need, affordability, required readiness understanding and modelling the problem- Alternatively, scenarios could and expectations for responsiveness will drive capability space up front is advantageous. accommodate situations which support investment and implementation decisions. Maximising preparation and collaboration and intelligence gathering on a group suspected Programmes will have to be maintained, and system integration should occur. Instituting of CBRN development, acquisition and use, likely evolve. Appropriate resource planning regular, critical reviews and adjustments will hoax situations or post event considerations. and investment, as well as change assist with change management. Taken This methodology can inform programme management, are necessary. Decision makers together these will reduce the chances that a planning, implementation, investment should accept the fact going in that CBRN suboptimal programme is established, which strategies, resource and risk management. forensics is an expensive proposition. cannot keep pace and meet expectations One set of key issues that would be • At least initially, a CBRN forensic when it matters most. illuminated from this analysis is the programme may not warrant a full time partitioning and positioning of field- presence. It is also possible that even when a *Since leaving the FBI, Dr Murch has been deployable and fixed assets. Concomitantly, programme is at the desired equilibrium, full involved in developing new capabilities, this would inform thinking on the need for and part time elements could be needed. Part extending the CBRN forensic mission to rapid, partial answers that can be delivered time elements will need to stay focused on additional agencies, participating in national from the field versus deeper, more their principal missions while being available level reviews, improving capabilities at the informative answers that require more time and focused on demand. These situations can interfaces of science/operations/law/ and sophisticated laboratories. be accommodated by aligning the part time intelligence and policy, publishing peer • Sixth, unless one agency has or can duties, responsibilities, expectations and reviewed scientific papers, making acquire everything necessary, an interagency outcomes with forensic support as closely as presentations (microbial forensics) and CBRN forensic construct for planning, possible with full time assignments. Closely conducting international outreach.
CBRN Forensics 41 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 42
Gap analysis and assessing capability
Gap analysis and assessing capability
The generic integrated forensic toolbox (GIFT) the twain never meet where front line and low capability member states to develop project has now completed its research and responders are concerned. an adequate CBRN forensic response data gathering phase, having engaged with capability based on their available resources first responders and forensic specialists from The project’s research work package (WP2) and threat spectrums. across Europe. End user workshops have been is now complete. As a result the outcomes To meet the first objective - creating a set of held in The Hague, Netherlands; Bristol, UK; of this work package are tangible and the CBRN scenarios that could be used by the Rome, Italy; and Riga, Latvia; with first R&D is well under way as the next phase forensic community - the GIFT consortium responders attending from 12 member states. gets going, incorporating the feedback from collected existing threat scenarios rather than These responders provided invaluable the research. In essence WP2 focussed on reinventing the wheel. In total 15 scenario feedback on their current national capability, two main objectives supported by a number sets were amassed, primarily from within the gaps in their response procedures and the of subtasks. The first of these was to set the EU with some national planning scenarios GIFT consortium’s approach. incident scene by capturing a number of included. Once gathered, these scenario sets credible and feasible CBRN scenarios that were critiqued to assess their suitability for Certainly these workshops demonstrated one could require forensic investigation. The GIFT’s purposes. Those deemed suitable for fundamental truth about CBRN forensic second objective tried to identify current best the project delivered a substantial cross science - in Europe at least - and that is that practice in CBRN forensic science within EU section of the CBRN threat spectrum for very few first responders have specialist member states, and future solutions for European member states. CBRN forensic knowledge or experience. operational capabilities. This process of Attendees included individuals with specialist identification for European CBRN forensics The scenarios quite logically tended to focus forensic knowledge and others with has now led to the development of a set of on the actual release of CBRN material into impressive CBRN backgrounds but apparently road maps, which can be used by both high the environment, which would then require a
42 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 43
Gap analysis and assessing capability
Very few first responders across Europe have specialist CBRN forensic knowledge or experience
forensics. Not only did this involved filling To follow a map you need a starting point. incomplete capability or knowledge gaps but So firstly GIFT had to establish the current in some cases it meant writing entirely new capability levels of various nations across scenarios to include preparation of CBRN Europe, no easy task given the disparity in agents and/or weapons, deployed weapons wealth, economics and public services and released weapons. The end result was a across the EU. The current state of the art dedicated and comprehensive template with for CBRN forensics was initially a total of 20 scenarios, comprising six each determined through the workshops of chemical, biological and radiological and mentioned earlier, and through two nuclear scenarios. questionnaires that covered a broad range of regional differences and approaches to These scenario sets were then used to satisfy CBRN forensic science. This approach the second main objective of this work provided keen insight into the member package; namely the development of CBRN states’ current CBRN forensic capabilities forensic roadmaps (as well as making them and the differently implemented available to the forensic/CBRN community). operational models. The disparities in In developing these roadmaps it was capability and operating models were important to identify and understand the eventually subdivided into three levels, ©NFI current capability gaps in various nations namely low, average and high capability. across Europe. Once the point of departure was set, GIFT needed a clear line of sight to the possible response to save lives and mitigate the The GIFT consortium held a gap analysis destinations for both low and high consequences. Such incidents would certainly workshop in June 2015 at the Netherlands capability countries. These destinations involve a forensic response, which was not Forensic Institute (NFI), utilising the were established by analysing both near factored in when these scenarios were developed CBRN scenario sets. A broad and far future developments in forensic originally developed. Other types of CBRN spectrum of organisations from all over science and technology, and the incidents that might require forensic Europe attended including the International needed/required solutions as indicated by investigation, were missing from the scenario Committee of the Red Cross; the European end user community. sets however, for example the discovery of an Czechoslovakia’s National Institute for NBC improvised chemical or biological laboratory. Protection; the UK’s Defence Science and The culmination of 12 months’ research is the In order to provide an inclusive set of Technology Laboratory (Dstl); generation of four different roadmaps that scenarios for the forensic community such Bundeskriminalamt from Germany and the describe the forensic tasks for both high and incidents were developed and incorporated Dutch Ministerie van Defensie. low capability nations (medium being an into the scenario sets. extrapolation from the two extremes), and For obvious reasons identification of gaps is the required actions needed to reach an The GIFT consortium needed to ensure it had essential in developing a capability, but improved CBRN forensic response capability. a comprehensive cross section of the threat simply identifying the gaps doesn’t These roadmaps are primarily intended for spectrum, covering most if not all necessarily lead to a set of roadmaps the EU member states and their forensic conceivable challenges likely to be showing the way from the current to the communities, but will also serve the GIFT encountered during a CBRN forensic desired capability levels. It was therefore CBRN project by validating the technological investigation, so that these scenarios would important to work on a number of subtasks and procedural developments over the support the future development of CBRN to build these roadmaps. lifespan of the project.
CBRN Forensics 43 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 44
Dangerous clues Dangerous clues
This article explores the ways in which the military equivalents, such as weapon or in response to allegations of use. This can military has been using forensic science and technical intelligence teams, were more feel inefficient, especially if they are held the forensic capabilities of sampling and focused on the effectiveness of captured back in another country, but the purpose is identification of biological, chemical and weapon systems. The increasing occurrence generally to prevent the teams becoming radiological agents (SIBCRA) teams. There is of asymmetric tactics in the complex, victims or contaminated themselves. a lesson to be learnt from analysis of the congested and contested military SIBCRA teams can vary from country to way in which silos within the military may environment forced a reconsideration of this. country although Nato through allied mean that the potential for SIBCRA teams If you can’t get the opponent to face you equipment publications (AEP) establishes has not been as well used as perhaps it could on a battlefield, then you need to pursue and some commonly accepted standards for key have been. For reasons of operational find them by other means. When they are components of the capability. The SIBCRA sensitivity, no single country’s SIBCRA hiding among a civilian population it is only team focuses on the recovery of samples and capability will be looked at in detail but natural that forensic investigative techniques the lab to process the samples. While rather discussion will be generalised or come to the fore. Usually considered to be traditionally samples would be taken back to drawn from the Nato guidance. material and personnel exploitation (MPE) All contacts leave a trace, according to forensic science in the military has grown to the great forensic scientist Locard. As a a stage where many countries have result, there is often information that can be deployable forensic labs, teams to recover extracted from evidence that links traces evidence and develop doctrine. An MPE or (DNA, finger marks etc), trace carriers forensic capability includes an evidential (phones, clothing, surfaces etc) and trace recovery component which may be sources (people, locations etc). You don’t accredited to the civilian ISO 17020 need to have watched CSI New York or NCIS standard. Analysis of the evidence is to know that this has been a source of great conducted in the second part of the investigative capability for modern police capability, the forensic exploitation lab. This forces across the globe. TV generally shows it may be accredited to ISO 17025. These two being used in a basic comparative method, in ISO standards are subject to a little a sadly true reflection of the way in which controversy as they are really test house some forensic services have declined. This is standards, and require interpretation and where a sample is compared with another guidance to apply them to forensic science. sample to demonstrate they are of the same While MPE might be unfamiliar to some provenance. More advanced scientists readers, SIBCRA teams should be more venture into the more controversial but also comfortable territory. As SIBCRA is reviewed highly valuable area of investigative forensic keep in mind MPE. SIBCRA is a fascinating science, where you have no comparative capability that has evolved over the years sample but try to elicit information from from a starting position of realising that the unknown samples and traces. The Sherlock use of strategic weapons needs to be verified Holmes version of this would be finding a in order to justify the resulting actions of the trace of soil on an explosive device and party that has suffered the insult. If a analysing it to try and determine where it country decides that its response to a might have originated [Dr Lorna Dawson at chemical attack is to launch nuclear James Hutton Inst rocks at this! Ed.]. weapons, then it needs some pretty strong Forensic science has been applied to evidence both for its own purposes but also explosive devices since 1800 at the latest, to validate its actions in the eyes of the with the French development of a weapons world and the UN in particular. So SIBCRA intelligence capability under the supervision teams have often been seen as strategic of the polymath Citizen Monge. But the assets, held back, behind the areas where the capability has generally been civilian and its materials might be used, and then deployed
44 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 45
Dangerous clues
Steve Johnson, Lecturer in Intelligence and Forensic Exploitation at Cranfield University, tries to slip a credit card between forensic science and SIBCRA
a national lab, recent years have seen some teasing you as you read. Both of these hazardous samples (eg explosives) one of the countries produce deployable labs to speed capabilities have sampling teams, a recovery best starting points might have been SIBCRA up the exploitation of the sample and to and transportation component and an teams - not least because some were avoid the risks of taking samples long analytical lab. They both input their specifically called military sampling teams or distances and to the homeland. The strategic intelligence at a high level rather than the military specialist couriers. nature and manner of their operation means tactical level. SIBCRA teams follow a The older and more cynical of you will be that they may not give any intelligence to painstaking process of sampling and less surprised that many in MPE have been the local commander, and so they do not documenting their samples because of the unaware of SIBCRA due to it being remove the requirement for CBRN recce impact of their intelligence - or perhaps we structurally outside their areas of teams, although it isn’t unheard of for some could say evidence. So you would probably responsibility. But there have been SIBCRA teams to have been cross trained assume that when the MPE capability was exceptions and there has been an interesting with CBRN recce teams. developing and trying to address challenges development with the increased attention on Perhaps ghostly wisps of déjà vu are like the transportation of potentially CBRN forensics, as a component of MPE.
WIT, MPE, SIBCRA... The military approach to forensics has a completely different alphabet soup to civilian responders ©CBRNe World
CBRN Forensics 45 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 46
Dangerous clues
CBRN forensics has been given a real economic pressures are currently tending to the expulsion of sweat/spit from exhalation platform by Nato and institutions like the make sure that the civil developed CBRN valves. This is a relatively easy problem to Netherlands Forensic Institute, DSTL, AWE forensic capabilities would be the natural address, though. A good SIBCRA team working and LLNL which have really provided thought support to CBRN MPE. to Nato guidelines would extract evidence to leadership. There has been exploration of The situation is a little more challenging a reasonable level of forensic integrity. both the forensic analysis of the CBR when looking at evidence recovery in a CBRN Scene processing or analysis is more materials themselves, which can be environment. Again, we can consider this as challenging. SIBCRA teams are mainly considered a classic SIBCRA function, and occurring in the civil domain for police/court focused on the recovery of the CBR the processing of evidence which may be purposes, military MPE or military SIBCRA. materials. This is not to the exclusion of CBR contaminated. This latter task is Starting with the military space it is hardly a other useful evidence, as documents and IT effectively MPE but in contaminated revelation to observe that in an area as are often identified by SIBCRA teams as conditions. At this nexus between MPE and underfunded and unvalued as CBRN there important intelligence to remove. They are SIBCRA the obvious question arises, who isn’t space for duplication of effort. This not necessarily as well trained in processing should carry out this work? Potentially there economic pressure doesn’t wholly remove without bias through a scene. Looking for is also a question of whether there is utility duplication and it can also introduce political trace evidence, body fluids, finger marks and in this capability being used both pressures where more reasoned logical DNA are all quite tough skill sets which can domestically as well as for expeditionary decisions would be preferable. So in an effort appear straightforward. It is true that anyone military situations. to inform such an argument, would a SIBCRA can learn to lift a mark in minutes – but to Briefly the lab processing component is team be able to carry out CBRN find and lift them consistently well takes a necessarily dominated by the SIBCRA forensics/MPE? lot of experience and training and then doing supporting labs. This is because once a piece Traditionally, processing a crime scene is a so in protective equipment is an even greater of evidence is contaminated with a CBR mixture of documentation and on scene challenge. SIBCRA teams already have a material then very few labs can legally store analysis. A SIBCRA team is already very well pretty high training burden and it’s not and handle it. For most countries there is trained in the documentation of scenes and unreasonable to ask if this is a step too far just a single CB facility and a single RN often receives training from police forces as for them. But would the burden be any facility. Many more have no real capability at well. While they may not use police/evidential lighter for a bespoke CBRN MPE team? all and would need to rely on allies to packaging or markings, their process is very MPE teams have been a bit of a fluid support them. So where CBRN forensics lab respectful of the chain of evidence. Cross development. Ranging across levels, at the capability has been explored it has tended to contamination is second nature to them due lowest everyone is a collector and small kits have a civil driving force and to be based in to the practice of working with hazardous have been designed for the conventional existing CBRN facilities. Unfortunately, that materials. Slightly more problematic is the collection of evidence. This is the recovery of means that there is an initial separation of fact that they are generally concerned about a trace carrier rather than more detailed MPE facilities, which tended to be based out protecting themselves from contamination processing and is a ‘best of a bad situation’ of explosive research units – of which there and some of their protective equipment, such approach where otherwise evidence might be are plenty - and CBRN forensic labs, even as air purifying respirators, can cause a lot of lost. Levels above that are teams with though both may be administered by the trace and DNA evidence to be introduced to military police, intelligence and often same research organisation. Strangely the scene. Most commonly this results from explosive specialists. Although these have experience, it is fair to say that at this stage they are still some distance off the level of a high end police counter terrorism forensic team. This is partly a problem of training and equipment and partly one of currency – with withdrawal from Afghanistan there are far fewer opportunities to practice. As all military staff in Nato have a basic CBRN proficiency, it is not un-thinkable to see the simplest solution as them just doing their work but in CBRN equipment. Weighing the two options for CBRN MPE/forensics instinctively a third option arises. With the training burdens faced on either side and the challenge of currency and exercising it is perhaps best that neither SIBCRA or MPE take on the role themselves. Rather taking a modular approach a CBRN forensic capability might best be delivered by a team drawn from MPE, SIBCRA and other relevant units. The challenge this presents is interoperability and exercising enough to make sure such ad hoc arrangements can work efficiently. That is no small effort but worthy of exploration. It would be an extremely interesting topic for war gaming and defence experimentation to see which of the methods would be most Traditional military respirators can make a DNA mess of the scene due to leakage from the appropriate and if a hybrid modular option exhalation valve ©CBRNe World could be made to work.
46 CBRN Forensics CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 47
A bit of the old Ultraviolets A bit of the old Ultraviolets
Silvia Lopez, from Ramem, on their DMA IMS solution for GIFT
RAMEM has been working within GIFT on Reproducibility has been improved by The project has focused on some of the developing and validating a novel detection shortening the ion pathways and challenges from the lower vapour pressure technique focussed on detecting possible consequently, minimising the probability explosives, including an appropriate chemical contamination at a crime scene. of ion clustering. Detection of explosive sample introduction system, which is substances using a UV ion source and DMA needed due to the special characteristics The RAMEM DMA (differential mobility has shown promising results. of the analytes. Several chemical toxic analyser) technique is an ion mobility substances, some of them considered as spectrometry technique, and RAMEM has been It is important to underline the importance of chemical weapon agent simulants have testing a higher resolution to try to reduce the these results in explosive detection using UV also been detected. false positive and negative rates, as well as a ionisation as an ion source for explosives. It is new ionisation technique. In the case of the also important to emphasise that the lower The DMA could be used on site, to analyse DMA, the ion source is ultraviolet (UV) light. vapour pressure explosives have been air extracted from within the crime scene We have been working on methods to analyse detected as well. Just a simple laboratory and detect potential chemical contamination. the air at a crime scene and identify potential heating plate raises the temperature The information fed back from the toolbox chemical agents present. So far, the results sufficiently to allow detection of PETN, TNT, will enable decisions to be made on the obtained have seen better resolution and ammonal (ammonium nitrate/TNT or usage of personal protection equipment and increased sensitivity, with lower limits of nitrometane/aluminium), ammonium nitrate treatment of casualties, as well as protocols detection and quantification. and RDX. and procedures.
CBRN Forensics 47 CBRNe Forensics vPress:CBRNe Forensics vPress 30/01/2017 09:34 Page 48
Forensics and Privacy You mustn’t remember this… Forensics and Privacy: beyond the right to be forgotten by Iris Huis in 't Veld, researcher at Eticas Research & Consulting Discussions about privacy are everywhere being served. Privacy is a human right, often They also need to ensure that privacy and there are countless examples of cases framed as the right to be forgotten, as well aspects are taken into consideration during where privacy has been unacceptably as a societal value that allows people to decision making. infringed. Edward Snowden revealed how the maintain a private space in which to be US government is engaged in surveillance themselves. But above all, what privacy Forensic personnel must pay close attention programmes that undermine the right to means is context dependent. to detail during the handling of data, with privacy. The hacking of the dating website physical evidence, and when the evidence is Ashley Madison caused the release of users' Nothing to hide digitised. Ethical considerations concerning personal information including real names, How can privacy be understood in the data protection – such as minimising the home addresses, search history and credit context of forensics? A basic question to data collection where possible - should be card transaction records, while the company ask is: do we have the right to be taken into account. InBloom, which offered a cloud service for forgotten? The answer depends on the student data, was shut down because it interpretation of the premise. Privacy is This all adds to the responsibilities of the shared data with third parties without often downplayed by the argument that you forensic data management chain. Emotional parental consent. should not be worried about privacy when factors, like uncertainty, and time pressure, you have nothing to hide. The assumption is especially at the crime scene, can cloud What does this have to do with forensics? that privacy is about hiding things – so if judgement and affect decision making. It might seem counter intuitive to discuss you have done nothing wrong, you do not Altogether, this places a heavy burden on the forensics and privacy together because, need to fear a privacy infringement. decision making skills and moral judgements while the legitimacy of identification is of the individual agent. This can be solved questionable in some of the cases described This definition of privacy as secrecy does not with protocols and training, but a solution above, identification is a fundamental goal reflect what privacy means in terms of data- can also be found in the design of the data of forensics. It is easy to disregard the intensive technology and certainly not what technology itself. importance of privacy in this context, but it should mean within a forensic context. this would be based on a misconception Privacy is not about hiding away from an Privacy by design of privacy. investigation or being secretive about it. It is The idea of embedding privacy proactively more about the right to protect and be into the technology itself – making it the What does privacy mean for forensics? protected from the harmful consequences of default – is the core of the design The topics of privacy and data protection are an infringement of privacy. philosophy of Privacy by Design. When almost inseparably linked to data-intensive privacy risks and vulnerability points are technology. Technology is data-intensive Examples include function creep, where data identified at an early stage of development, when the data is fundamental to the is collected for one purpose but actually gets the information can be fed back into the functioning of the technology or is generated used for another purpose and algorithmic development process and solutions can be in the process. When data about people is discrimination when biased software makes embedded in the design. involved, rights and values should be decisions based on data. So in talking about considered in order to prevent negative privacy, it’s not about hiding from forensic Within the GIFT consortium, technology and consequences for those individuals. investigation and preventing identification, protocols are being designed to enable but the need for responsible management of CBRN forensics and support decision making Considering that forensic investigations data to prevent the potentially negative at the crime scene. There is an opportunity involve dealing with personal data – consequences of mishandling data. to foresee the data management including fingerprints and DNA - the requirements and make responsible design requirements for data protection also applies Ethical decision making choices at the outset. to forensics. Personal data can contain The lesson learned here is that values and sensitive personal details or lead to rights should be taken into account in the When privacy – along with other relevant assumptions about the individuals involved. process of forensics. Forensic investigators ethical values - are embedded in the design In the wrong hands, or when misinterpreted, will already weigh up many factors in the of the toolbox it will help to minimise risks. data can have disastrous consequences. course of their work, including collecting the The aim is to create a strong socio-technical Negative consequences include correct samples for the investigations from toolbox to aid the CBRNE forensics teams in stigmatisation, discrimination and wrongful the crime scene and doing this in such a ensuring privacy issues are maintained along convictions which can prevent justice from way as to maintain the chain of custody. the chain of custody.
48 CBRN Forensics MobiLab™ Mobile CBRN Labs at the Point of Need
E-N-G is the U.S. leader in mobile laboratory design and production. We have delivered over 400 Mobile Laboratories worldwide since 1977 — more than any other US manufacturer.
These versatile, easy-to-operate labs allow fast, on-site identification or confirmation of CBRN hazards and threats. E-N-G mobile laboratories are also effective in quickly determining on-site the extent of contaminated areas and in monitoring the progress of remediation efforts.
The MobiLab™ line includes vans, trucks, trailers and containers. Applications range from general-purpose and chemistry to BSL3-ready and CBRNE threat detection and analysis.
Scientists are on staff to assist with workflow design, instrument specification and laboratory practices training. MobiLab systems support procedures ranging from screening to certified testing methods.
Customers include US EPA, DOL, Army, Navy, Homeland Security and other public agencies and private companies.
Fully-engineered base models include electrical and environmental systems, lab support equipment Lab-grade interior finishes for easy decontamination Models are instrument ready and turnkey systems are available Models are easily customized to meet specific requirements BSL1, 2 and 3-ready models
Applications include: Q CBRNE Threat Detection Q and Analysis Q Public Health and Research Q Environmental / Air Quality Q Industrial Chem & Bio Q Education, and more
E-N-G is your partner for state-of-the-art mobile solutions. E-N-G is a PositiveID Company Call us to discuss your unique requirements. PositiveID develops detection and diagnostics capabilities for Point-of-Need (PON) applications, including its M-BAND autonomous E-N-G Mobile Systems, Inc. A PositiveID Company monitoring for biological weapons 2245 Via De Mercados, Concord, CA 94520 (licensed to Boeing) and FireflyDx (925) 798-4060 / (800) 662-4522 • www.e-n-g.com handheld molecular diagnostics. © 2016 Cobalt Light Systems Ltd.
Introducing ... NEW Handheld Through-Barrier Chemical Identification AVAILABLE /ƚŚƌŽƵŐŚŽƉĂƋƵĞĂŶĚĐŽůŽƵƌĞĚƉůĂƐƟĐƐ͕ĚĂƌŬŐůĂƐƐ͕ƉĂƉĞƌ͕ TO DEMO ǁƌĂƉƉŝŶŐ͕ƐĂĐŬƐĂŶĚĨĂďƌŝĐ NOW! ƐƐĞƐƐĂŶĚĂŶĂůLJƐĞƐĂŵƉůĞƐǁŝƚŚŽƵƚƚĂŵƉĞƌŝŶŐǁŝƚŚƉĂĐŬĂŐŝŶŐ Seals remain intact - Evidence is preserved Accurate ID of chemicals and mixtures in ~1 minute www.cobaltlight.com/resolve
00811 Resolve A4 AD Forensics AW.indd 1 06/10/2016 17:39