On the Scene and In the Lab

Vol.13 | No.2 JUNE 2016

Crime www.forensicmag.com

Scene
Staging
A Mysterious
Police Death

INSIDE:
U The Black Dahlia
U Encrypted Cell Phones
U Forensic Palynology
2016 Promega Corporation. All rights reserved. 27572897
Vol. 13 | No. 2 JUNE 2016

features General Manager

Albert Guffanti

4 FROM THE EDITOR

The Hidden Cost of the Rape-Kit Backlog
Sean Allocca
973-920-7048
albert.guffanti@advantagemedia.com

Editorial Director

6
Bea Riemschneider
Analyzing Unknown Human Remains: bea.riemschneider@advantagemedia.com
Cold Missing Persons Case
Bruce Budowle, Ph.D., and Angie Ambers, Ph.D. Editor
Sean Allocca

8
sean.allocca@advantagemedia.com
The Dangers of Hidden Apps on Forensic Investigations
Cindy Murphy ADVERTISING/SALES
NEW ENGLAND

10
Crime Scene Staging: A Mysterious Police Death CJ Chirico
Vernon Geberth 973-920-7112
cj.chirico@advantagemedia.com

14
One-Step Fluorescent Fuming MID-ATLANTIC/MIDWEST
Arlene Nelson
Jeremy Malinge, Ph.D.
973-920-7189

15
arlene.nelson@advantagemedia.com
DNA CONNECTION
MIDWEST
Utilizing DNA Evidence Decades after Pitchfork Jolly Patel
Chris Asplen 973-920-7743

16
jolly.patel@advantagemedia.com
Forensic Palynology: Tracking the Near Invisible WEST
Seth Augenstein Cindi Richardson
973-920-7680

18
FORENSIC PATHOLOGIST: EXPERT WITNESS cindi.richardson@advantagemedia.com
Mind Your Manners: Where Death Certication Ends SOUTHWEST
and Prevention Begins Bill Little
973-920-7688
Judy Melinek
bill.little@advantagemedia.com

20 COLD CASE CHRONICLES

The Black Dahlia: The Murder of Elizabeth Short
Dolly Stolze
REPRINTS/EPRINTS
For reprints and permissions,
contact The YGS Group

22
800-290-5460 or Reprints@theYGSgroup.com
DIGITAL FORENSIC INSIDER
Encrypted Cell Phones CUSTOMER SERVICE
John J. Barbara For subscription related matters contact Omeda
Customer Service: 847-559-7560 or abm@omeda.com

24 WHO SAYS?
Crime Scene Vehicles: Choosing the Right Vehicle for the Job
Dick Warrington and Owen McDonnell
List Rentals
Infogroup Targeting Solutions
Senior Account Manager, Bart Piccirillo,
402-836-6283; bart.piccirillo@infogroup.com
Senior Account Manager, Michael Costantino

departments 402-863-6266; michael.costantino@infogroup.com

5 On the Web 24 Advertiser Index

ADVANTAGE BUSINESS MEDIA, LLC
Forensic Magazine (ISSN #1553-6262, USPS #023-655), is published four times a year in Mar, Jun, Sept, & Dec by Advantage Business Media, 100 100 Enterprise Drive, Suite 600
Enterprise Drive, Suite 600, Box 912, Rockaway, NJ 07866-0912. No part of this publication may be reproduced in any form without prior written permis- Rockaway, NJ 07866-0912
sion of the publisher. Opinions expressed in articles are those of the authors and do not necessarily reect those of Advantage Business Media. Phone: 973-920-7000; Fax: 973-920-7541
Periodicals Mail postage paid at Rockaway, NJ 07866 and at additional mailing ofces. POSTMASTER: Send address changes/cancellations to Foren- Jim Lonergan
sic Magazine, P.O. Box 3574, Northbrook, IL 60065-3574, 847-559-7560, Fax: 847-291-4816, email: abfor@omeda.com. Publications Mail Agreement CEO
No. 41336030. Return undeliverable Canadian addresses to: Imex/Pitney Bowes, P.O. Box 1632, Windsor Ontario N9A 7C9.
Subscriptions are free to qualied individuals. Non-qualied subscription rates per year are: USA $70, Canada, Mexico & Foreign $100, single copy USA
Terry Freeburg
$17.50, single copy Canada, Mexico & Foreign $25, prepaid in USA funds drawn on a USA branch bank.
COO/CFO

Printed in USA: Every attempt is made to ensure the accuracy of the information contained herein, however Advantage Business Media and its employees Beth Campbell
cannot accept responsibility for the correctness of information supplied, advertisements, or opinions expressed. Copyright 2016 Advantage Business CCO
Media. All rights reserved.

JUNE 2016 Forensic Magazine | www.forensicmag.com 3

editor
from the
The Hidden Cost
of the Rape-Kit Backlog
Sean Allocca
T
he White House recently reminded us that our
rape-kit problem is going nowhere fast. Four
hundred thousand kits and counting stacked
on evidence-room shelves are potentially hoarding
powerful DNA evidence that could lock up dangerous
sexual predators nationwide. Sounds straightforward
enoughpay to test the kits, enter the DNA proles
into CODIS, and investigate the hits. But, like most
things in life, the problem is in the funding.
The Obama administration recently announced
a grant program to fund testing and improve inves-
tigations. Last years Sexual Assault Kit Initiative
awarded $41 million to 20 juris-
dictions, which was a well-needed The real cost
shot in the arm. The 2016 SAKI
program will award $45 million. is in the legwork.
But as the years pass and the
problem continues to grow, how much will Americas
rape-kit problem cost?
Last year, the City of Houston announced a $6
million initiative to test all its kits dating back to
the 1980s. The city only paid $453 per kit, which is
a basement-bottom price (most experts estimate the
cost of testing a kit at over $1,000). At that price,
testing the nations backlog would cost around $180
million, well within the governments $600 million
authorized in the Debbie Smith Act through 2019.
But, the real problem is in the legwork. Once the
results are in, labs still have to examine and analyze
the results. Then, law enforcement agencies have to
4 Forensic Magazine | www.forensicmag.com
sean.allocca@advantagemedia.com
nd the resources to mount full investigations. Those
expenditures can cost much more than the testing it-
self. Ramit Plushnick-Masti, of the Houston Forensic
Science Center, said nding the funding was a major
stumbling block. Youre not only providing for the
cost of testing the kits, she said, but the cost of hav-
ing the resources internally to take cases to the next
level and thats where there was a lot of expense.
What we do know is that testing the backlog keeps
criminals off the streets. A court in Ohio sentenced
serial rapist Dwayne Wilson to life last year. Al-
ready a known pedophile, Wilson was convicted of
seven counts of rape after his DNA
matched rape kit evidence relating
to assaults on four women in Cleve-
land in the 1990s. The judge called
Wilson the worst of the worst. The
most shocking part of the story: when Wilson was
initially indicted, he was just days away from being
released from prison, where he was serving ve years
for sexual battery. Evidence from a decades-old rape
kit prevented a convicted pedophile from walking
back onto the same streets where he physically forced
women and young girls into his car and raped them at
knifepoint.
While we dont know what the ultimate cost of
testing all Americas rape kits will be, we do know
that it saves lives. What we may never knowand
the true value of these programsis how many inno-
cent women and children have already been saved.
JUNE 2016
 Forensic Magazine Trending News
Does CODIS Contain Untapped Bones of King Erik IX Analyzed,
Ancestry Information 850 Years Later
The FBIs Combined DNA Index System has No historical records
collected millions of genetic proles from remain of the king, and
criminals, unknown offenders, missing per- patron saint of Stock-
sons, and unidentied human remains. But, is there a whole lot holm, whose likeness still
more information present in the proles than previously believed? adorns the Stockholm
coat of arms. But, what
Floaters May Decompose in Deep Water Faster Than can modern science reveal about the alleged
Previously Thought remains of one Swedens most celebrated
Bodies found in water are generally martyrs?
thought to be better preserved, due to
slower decomposition rates. But new Disgraced Lab Analyst Was High
research on pig carcasses indicates that
deeper, more oxygen-rich water can sig-
Almost Daily
Instead of testing drug
nicantly speed up breakdown processes.
evidence that came into
FBI Warns About Altered Fingerprints the lab, a former Mas-
In a study last year, the FBI identied 412 sachusetts crime lab
records in the Integrated Automated Finger- analyst not only ingest-
print Identication System which showed ed them, she admitted
deliberate print alteration. The biggest to smoking crack before a state police accred-
number of altered prints appeared to be by itation inspection, and even went so far as to
people who had extensive criminal records manufacture crack cocaine in the lab for her
and multiple law enforcement encounters. own personal use.

On theWEB
www.forensicmag.com

Featured in DFI
@@@
Four Ways the FBI May Have Unlocked the iPhone
according to a public search on federal spending, the Israeli-based cyber-security company Cellebrite has offered services
to dozens of federal agenciesfrom the Justice Department, to the DOE, to the Forest Service.

Panama Papers: How Investigators Searched 2.6 Terabytes of Data

The Panama Papers held some of the most incriminating evidence into an alleged international tax-evasion scheme ever
uncoveredsome 150 politicians, and close associates, have been linked to hundreds of thousands of offshore shell com-
panies, reportedly used as tax havens to shield billions of dollars.

Read these articles and the rest of Forensic Magazine here:

www.forensicmag.com

Join the conversation on

JUNE 2016 Forensic Magazine | www.forensicmag.com 5

 feature
Analyzing Unknown
Human Remains:
Cold Missing Persons Case
Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Bruce Budowle, Ph.D., and Angie Ambers, Ph.D.

Byline

F
xxxxxx

T
he adoption of next-generation sequencing (NGS) technology in the
forensic industry is in its infancy, but its ability to garner more actionable
information, particularly in compromised samples, is undeniable. Better
described as massively parallel sequencing (MPS), the technology was intro-
duced in the 21st century and has fundamentally revolutionized how biological
systems could be studied with unprecedented throughput, scalability and speed.
Important discoveries already have been made in many elds, in which, it is
applied. For the forensics community in particular, MPS offers a highly comple-
mentary tool to Capillary Electrophoresis (CE) that is helping scientists in the
eld delve deeper into genetic information and nd answers to very challenging
questions.
CE sequencing and MPS are similar in that both methods rely on a DNA
polymerase to drive incorporation of deoxyribonucleotide triphosphates into Bruce Budowle is director of
a DNA template strand in the sequential cycles of DNA synthesis. During CE the University of North Texas
sequencing, nucleotides are identied by uorophore excitation, while nucleo- Health Science Centers Insti-
tute of Investigative Genetics.
tide incorporation during MPS is measured by chemical- or uoresence-based
detection methods. The complementary nature of both systems lies in the com-
bination of data generated by each.
Forensic scientists use CE to rapidly and cost-effectively test a validated set of short-tandem repeat (STR)
markers by determining differences in DNA fragment lengths. MPS takes it a step further by, in addition to
length information, providing STR sequence information and genotyping single nucleotide polymorphisms
(SNPs) within the repeat marker sites. Also SNPs at other places within the genome can provide identity,
ancestry and phenotypic information about the sample. While applying MPS to forensics may be perceived as
taking a longer time to obtain a result, it can provide more genetic data from challenging or degraded samples
and, on a per marker basis, in actuality is quite cost-competitive.

Mining for Clues from Unknown Human Remains

An example of these powerful technologies in action involves the case of unidentied human remains dis-
covered in the small South Dakota town of Deadwood. Established in 1876, Deadwood was a primitive gold
mining camp inhabited by thousands of pioneers, including historical gures such as James Butler Wild Bill
Hickok, Seth Bullock, and Martha Jane Calamity Jane Cannary.
Little is left from the towns lawless frontier days, but a recent study using CE and MPS technology has provided
new insight into one former resident from that era who construction workers unearthed in 2012 while building a
retaining wall near the citys original cemetery site.
Using ancestry informative and phenotype markers, Y-STRs, and mitochondrial DNA analyses, scientists
from the Institute of Applied Genetics at the University of North Texas Health Science Center were able to
pull substantially more information from the unidentied, 140-year-old human skeleton than possible by tra-
ditional CE analyses. Prior to applying MPS, anthropological insights and a few lineage genetic markers were

6 Forensic Magazine | www.forensicmag.com JUNE 2016

 the only available points of reference for the former
Deadwood resident. These techniques were able to
determine that the person was a male and likely of
European descent.
By sequencing the samples, however, the research
team could now paint a more vivid picture of what
this person once looked like. In addition to revealing
his gender and ethnicity, the MPS data also sug-
gested the man likely had light red hair and brown
eyes. Remarkably, the team was able to generate the
data and reach their conclusion in just a few days.
Benets
Indeed, MPSs ability to unearth a wealth of data
to supplement our elds gold standard methods has
signicant potential to help solve modern-day crime
as it moves from research to a validated technol-
ogy. The tool has been proving its utility since its
debut more than a decade ago, and there are many
examples in which its ability to read data from highly
degraded samples could have been instrumental to
help solve cases, including a two-decades-old missing
person investigation in particular.
Donna Williamson was a 19-year-old woman from
North Richland Hills, Texas, who disappeared in
August 1982. Her remains were found 11 years later
on the side of a highway, but identity could not be
established due to the degraded state of the bones
and the limited technology available at the time.
The physical examination only revealed the remains
were likely female and provided approximate age
and height. Unfortunately, in this case, human error
may have delayed identication since it was later
determined that investigators were comparing teeth
taken from the right jaw to dental records of the left
mandible. Williamsons case would remain unsolved
for another decade until DNA databasing in Texas
came online.
By comparing DNA samples provided by Wil-
liamsons family members with CE sequencing data
recovered from her degraded samples, scientists were
able to determine that there was a 95.21 percent
probability that the unidentied remains belonged
to Williamson. While not quite enough to positively
identify her by DNA alone, investigators decided to
re-examine dental records, which revealed the error in
the original investigation. This cross-referencing effort
JUNE 2016
helped positively identify Williamsons remains. Using
orthogonal methods for human identication may
reduce such errors early on. If it had been available,
MPS technology could have been that additional tool
to help solve the mystery much earlier, and relatively
quickly, with its ability to type more markers.
It is clear that MPS is moving the needle in every
eld it reaches. Similar to the critical advances MPS
is affording science to better understand cancer, in-
fectious disease, and even biodiversity, the technol-
ogy has real potential to revolutionize public safety
and the way we approach criminal investigations. Its
use in compelling forensics research studies around
the globe already is demonstrating how it could be
applied in real-world cases. European countries like
Denmark have validated the technology, and are
currently using it for routine ancestry and human
identity case work. The Netherlands also has imple-
mented a similar MPS program to help solve crimes
in that country, while the U.S. Armed Forces DNA
Identication Laboratory has begun using MPS to
help identify unknown remains from past wars. Time
will tell how quickly MPS will be widely adopted as
a validated tool for routine forensics in the United
States, but the insightful research being generated
today offers compelling reason for its use in crime
labs everywhere.
Bruce Budowle, Ph.D. is director of the University of
North Texas Health Science Centers Institute of In-
vestigative Genetics and Professor of the Department of
Molecular and Medical Genetics. He is a renowned expert
in forensic genetics and counterterrorism, primarily in
identication of victims from mass disasters and microbial
forensics. Prior to joining the UNT Health Science Cen-
ter, Budowle spent 26 years as a scientist for the Federal
Bureau of Investigation (FBI) Laboratory Division.
Angie Ambers received her Ph.D. in molecular
biology with an emphasis in forensic genetics and human
identication. Her research has involved investigation of
methods for improving autosomal and Y-STR typing of
degraded and low copy DNA. Currently Dr. Ambers is
a postdoctoral fellow at the IAG (specializing in skeletal
remains analyses) and an adjunct professor at UNT,
where she teaches Forensic Molecular Biology to students
in the FEPAC-accredited forensic science program.
Forensic Magazine | www.forensicmag.com 7
 feature
The Dangers of Hidden Apps
on Forensic Investigations
Cindy Murphy

H
idden apps are growing in popularity. While initially marketed
as a way for teens to hide videos, photos, forbidden apps, and
text messages from the watchful eyes of parents, the use of
hidden apps is quickly expanding. Hidden apps are increasingly used
for criminal activity. At the local level, they can be used as a tool to
facilitate drug transactions, sexual assaults, up-skirt photos, as well
as data exltration and theft. On a much larger and more dangerous
international scale, these apps can be used for recruitment purposes
by ISIS and other terrorist groups. Because hidden apps are becom-
ing more common sources of evidentiary data in criminal cases, it is
essential that forensic investigators take the time to learn about them.
Otherwise, key evidence could be missed.
When it comes to hidden apps, awareness is critical. Forensic exam-
iners must know these apps exist and how to nd them. While there Cindy Murphy works for the City
of Madison, Wisc. Police Depart-
are many hidden apps on the market today, new ones are introduced ment.
virtually every day. A quick Internet search is an excellent way to stay
current on whats available and trending in the world of hidden apps. Along with knowledge of whats
out there, examiners must know how apps and data are being hidden to ensure they are not over-
looked.

Types of Hidden Apps

There are three main ways to hide apps. Some users manipulate their phones to hide things in places
where they dont belong. Others use apps that are designed to hide other apps inside. Then there are
ofcial hidden apps (also known as decoy apps), which appear to do one thing while they are actu-
ally designed to do something else.
One of the most popular hidden apps is the calculator appSpyCalc and Smart Hide Calcula-
tor are two examples. These apps are fully functioning calculators with a twist. Once a password is
entered, a new interface appears that allows users to access and store pictures, videos, documents or
les that are otherwise hidden to someone reviewing data on the phone. Audio Manager is another
popular hidden app, which as its name suggests, disguises itself as an audio manager that can be used
to turn volumes up and down (ringer, alarm and other volumes). If a user presses and holds the Audio
Manager title the actual hidden app, Hide It Pro, will appear.
The Best Secret Folder app hides the fact that an app is installed on the phone. At rst glance the
folder looks innocuous, even empty depending on how it is congured. However, with the right com-
bination the user can access apps that are hidden within the folder. Similar apps like Vaulty or Hide
It allow the user to dump other apps into the folder which then disappear to the unsuspecting eye.
The apps re-appear after pressing a particular area on the screen or putting in a PIN number.
A less technical, but commonly seen way to hide apps is for the user to create folders or nests of
folders on their phone that appear to be harmless, and then to store data they wish to hide within
that folder. They may even install an application that allows them to change an apps icon so that it
appears to be a different app on the phone.

8 Forensic Magazine | www.forensicmag.com JUNE 2016

 Hidden apps reinforce a valuable lesson in
the world of forensics, just because you dont
see something initially, doesnt mean nothing is
there. While it is not realistic to expect examin-
ers to stay current on each and every app, know-
ing they exist and might be installed is essential.
During an investigation it is wise to consider
a hidden app might be in use, which means a
deeper dive is necessary.
Examining the Data
When parsing data from mobile devices, forensic
tools are a good starting point. However, alone,
they are no longer enough. In comparison to
more common apps like Facebook and Twitter,
mobile forensic tools are unlikely to automatical-
ly nd and parse data from hidden apps. These
apps can also store their data in slightly differ-
ent ways. They may store data in locations that
are unexpected or they may use encryption or
encoding. This can affect a forensic tools ability
to correctly parse data even if the tool is able
to obtain the data associated with the app. As
a result, examiners must dig deeper. They have
to go through the le systems, dig through the
databases and do deeper forensics work to nd
information, decode it, and manually parse it.
Without knowledge of how hidden apps poten-
tially encode or store data, information may be
missed. For example, if a forensic tool successful-
ly pulls data from a hidden app, the data may not
be in human readable format. For examiners who
solely rely on what they see, it is easy to overlook
this information or assume that it is not readable.
Therefore, it is important that examiners not
only know what they are looking for, they must
also know how to nd data and how to transform
it into a readable format.
Furthermore, some hidden apps claim they
use encryption when they actually use different
combinations or multiple levels of encoding to
mask an examiners ability to see things in plain
text. Unbeknownst to the user, who assumes the
content is unreadable to others, knowledgeable
examiners can access, decode and view this infor-
mation.
JUNE 2016
The Good News
Getting results from hidden apps is not impos-
sible, but it is potentially more time consuming.
If there is a hidden app installed on a device,
chances are the data associated with that app,
which was intentionally hidden, could be very
relevant to an investigation.
While a forensic tool may allow an examiner
to extract and access hidden data, it is not always
obvious how to work with that data. Courses are
available that teach examiners how to dig deeper.
Learning how to work with various types of data
and to use additional tools to attack the problem
can be the key to unraveling the puzzle. This is
where vendor-specic training tends to fall short.
Vendor training is good for learning about the
capabilities of a specic tool, however broader
awareness is needed because no one tool supports
every phone or every app. Furthermore, to validate
the ndings from one tool requires the use of other
tools. To get the most comprehensive and accurate
view of data extracted from a device, and to vali-
date ndings, examiners need to use multiple tools.
One of the biggest benets of taking a vendor-
neutral mobile forensics training is that they dont
shy away from expressing and teaching what a tool
is unable to do or doesnt do well. Instead, these
training courses offer advice on how to use a variety
of tools to supplement each other, and get the
job done as quickly, accurately, and efciently as
possibledespite the shortcomings of any individ-
ual mobile forensic tool. Historically when dealing
with mobile devices, basic forensic knowledge was
enough. However, with hidden apps, that is no
longer the case. With greater awareness of what
apps exist and the proper education and training,
valuable case data can be extracted. Staying current
and knowing where to look is the ultimate key.
Cindy Murphy works for the City of Madison,
Wisc. Police Department. She is a certied forensic
examiner and earned her masters degree in Forensic
Computing and Cybercrime from University Col-
lege, Dublin. She is also a courseware co-author and
Advanced Mobile Device Forensics instructor for the
SANS Institute.
Forensic Magazine | www.forensicmag.com 9
 coverstory
Crime Scene Staging
A Mysterious Police Death
Vernon Geberth

O
n a clear September morning, Lt. Charles Joseph Gliniewicz was found shot to death in a heavily
wooded area off a gravel side street in Fox Lake, Ill., a small suburb of Chicago. Minutes earlier,
Gliniewicz had radioed from his unit that three suspicious male subjects were observed near an
abandoned cement plant that abutted a swamp. Gliniewicz reported over the radio that the group had
taken off toward the swamp.

During Dispatch: Do you need a second unit?

Gliniewicz: 10-4. Go ahead and start.

At 8:05 A.M., responding ofcers spotted Gliniewiczs unmarked unit, and entered the overgrown
woods. The ofcers heard what they believed to be a single, mufed gunshot. They proceeded cautiously
along the pathway until they reached a clearing 200 feet into the woods. There was Gliniewiczs body, face
down. Along with his pepper spray, his holster was empty and his weapon was missing. They rolled his
body over and checked for a pulse.
The Lake County, Ill. Sheriffs Ofce arrived and declared the case an active-shooter event, and a
homicide investigation with on-scene command. The responding ofcers were advised to use cautionthe
offenders could still be in the area. A loose perimeter was established approximately 1.5 hours into the
incident, and a 2.5-mile secure perimeter was established around the entire wooded and swamp area. The
two-month long investigation into the shooting death of Charles Gliniewicz was about to begin.

Securing the Crime Scene

In the hours that followed Gliniewiczs death, over 400 local, state and federal ofcers conducted a massive
manhunt for the alleged shooter or shooters. There were 48 K-9 teams from different jurisdictions in the
search, and ve air craft that including four helicopters and one xed wing aircraft. The terrain was so
thick that the searching ofcers could barely see one another. Dozens of state and federal agents joined the
local police, and a no-y zone was established. Schools were locked down; commuter trains screeched to a
halt. The small town of Fox Lake looked like a warzone.
The Lake County Major Crime Task Force took control of the scene, but they could not allow the
evidence response technicians (ERT) access to the crime scene for several hours. Because of the possibility
that an active shooter was still in the area, the team was eventually escorted to the scene by a tactical unit.
The terrain made the search tedious and time-consuming. However, the ERT teams were able to trace the
steps of Gliniewicz from his vehicle to where he was found. Each area of interest identied by orange cones
or markers began to suggest Gliniewicz was confronted by assailants and a struggle ensued:
s His pepper spray had been activated near the top of the path.
s A police baton was found lying in the brush.
s Sunglasses lying in the brush perhaps lost during a struggle.
s A spent shell casing was eventually matched to his H&K .40 caliber semi-auto weapon.
The ERTs then processed the location where Gliniewiczs body was found. Before bagging Gliniewiczs
hands for transport a eld test for gun-shot residue was done. A systematic search of the area surrounding
the body revealed that Gliniewiczs gun was found tossed into the underbrush.

Crime Scene Staging

Staging a scene occurs when the perpetrator purposely alters the crime scene to mislead the authorities
and/or redirect the investigation. Staging is a conscious criminal action on the part of an offender to
thwart an investigation.1
10 Forensic Magazine | wwww.forensicmag.com JUNE 2016

Figure 1A reconstruction of the crime scene in
Fox Lake, Ill.
Crime scene staging events hap-
pen in all jurisdictions all across the
United States, and seem to be in-
creasing as people learn more about
the processes of death investigations through
the media, true crime books, television mystery
shows, and movies.1 In many staged crime scenes,
the staging tends to be overdone, or is inconsistent
with the events and initial statements.
Most offenders arent familiar with the workings
of a crime scene, or know differences between a
burglary, rape, robbery, homicide, accident or suicide
scene. They have an idea of how the scene may ap-
pear from television or the movies, and believe they
can recreate those depictions. However, upon closer
scrutiny by criminal investigators, along with the ap-
plication of forensic techniques, the staging becomes
readily apparent.

Equivocal Death Investigations

This case was a classic equivocal death investigation (EDI). EDIs are inquiries that are open to interpre-
tation. The facts may be purposefully vague, or misleading. The death is suspicious or questionable based
upon what is presented to the authorities. These deaths may resemble homicides or suicides, accidents or
naturals. But whats important is that these require further investigation, and cannot be concluded without
understanding the victimology, and the circumstances surrounding the event.1
There are 10 protocols for investigative strategies to help understand the crime scene. Investigators must
take each factor to its ultimate conclusion:
1. Assess the victimology of the deceased.
2. Evaluate the types of injuries and wounds of the victim in connection with the types of weapon
employed.
3. Conduct necessary forensic examinations to establish and ascertain the facts.
4. Conduct an examination of the weapon for latent and ballistic evidence.
5. Evaluate the behavior of the victim and suspects.
6. Establish a prole of the victim through interviews with friends and relatives.
7. Reconstruct and evaluate the event.
8. Compare investigative ndings with the medico-legal autopsy and confer with the medical examiner.
9. Corroborate statements with evidential facts.
10. Conduct and process all death investigations as if they were homicide cases.

Autopsy Results
An autopsy was performed at 7:05 p.m., on September 1. The pathologist noted a bullet perforation over
the left chest two inches below the upper collar. This perforation corresponded to the approximate loca-
tion of the gunshot entrance wound. The approximate angle of downward pathway was 40 degrees. Further
examination indicated a bullet perforation through the cell phone attached to right side of vest with
impact injuries. The cause of death: a penetrating gunshot wound to the chest.
The pathologist, Dr. Manuel Montez, met with members of the Lake County Task Force and the FBI.
He provided a theory based on the angle of the wound: the offender(s) had disarmed Gliniewicz and
placed him on his knees. Gliniewicz may have possibly attempted to lunge at his attackers, thus explaining
the extreme angle of the shot under his bullet-proof vest.

Active Investigation
The investigation was still being conducted as an active homicide. An extensive search of the area elim-
inated any active shooters, and the task force, headed by Commander George Filenko, turned toward the

JUNE 2016 Forensic Magazine | wwww.forensicmag.com 11

 coverstory
investigation. They located the three
individuals matching the description
based on area videos. These videos
had been collected by investigators
from businesses, private homes and
private dash cameras. All three were
identied, and all three had solid
alibis.
The day before the shooting, a
GPS system was installed in Gliniew-
iczs car computer. Information from
GPS indicated that Gliniewicz had
stopped at a local gas station and pur- Figure 2A diagram of the gunshot wounds.
chased two packs of cigarettespart
of his regular routine. He then drove
to the cement plant. His vehicle was parked for approximately 25 minutes before he called dispatch about
the three suspicious subjects.
Early on in the investigation there were some differences of opinion between the police and the coro-
ners ofce as to the manner of death. Emotions at the Fox Lake Police Department, and the community as
a whole, were running high, following the death of one of their own. There was also a lot of media pressure
on both the coroner and the Task Force commander to release information and quell mounting rumors.
A week after Gliniewiczs death, there was a rumor that he had been shot in the back in an execution.
Coroner Thomas Rudd squelched that rumor stating that Gliniewicz had suffered a catastrophic gunshot
wound of the chest. He also stated the death had not yet been determined, and could possibly be a homi-
cide, suicide, accident, or natural. The press jumped on the word suicide. Meanwhile leaks from alleged
inside sources continued to plague the investigation.

Victimology
The most signicant factor to consider in a death investigation is victimologythe collection and as-
sessment of all signicant information as it relates to the victim and the victims lifestyle. This includes:
personality, employment, education, friends, habits, hobbies, marital status, relationships, dating history,
sexuality, reputation, criminal record, history with alcohol or drugs, physical condition, neighborhood, and
others. These attributes all help investigators ascertain motives, suspects and risk factors.
In the digital age, cell phones, credit cards, and electronic toll systems, like EZ Pass, now play an
important role in ascertaining victimology. There is also electronic surveillance in many public places for
security reasons. The investigative question is: Who was the victim and what was going on in his or her
life at the time of their murder?

Jekyll and Hyde

The Task Force requested and initiated numerous subpoenas for Gliniewiczs credit cards, personal bank
accounts and the bank accounts for the Explorers Club, a youth mentoring program run by Gliniewicz
through the Fox Lake Police Department. It was quickly discovered that Gliniewicz had a Jekyll and Hyde
personality, which Commander George Filenko described as Gliniewiczs two personas. The public persona
was GI Joe the community hero, whom everyone seemingly loved. But, the real persona was a criminal
with a badge. The Task Force learned:
s Gliniewicz was stealing money from the Explorer fund, and taking extravagant vacations to
Hawaii with his wife.
s He was involved in adulterous affairs and accessed adult sites known for locating prostitutes.
s His personal record indicated he had been sued in federal court by a female subordinate for forcing
her to have sexual relations with him on and off duty.
s He facilitated a sham marriage between his son, who was serving in the military, and one of
Gliniewiczs female companions, to get money and provide the female with insurance for her and
her children.
s He had on at least two occasions forged a signature to acquire military style equipment.

12 Forensic Magazine | wwww.forensicmag.com JUNE 2016

 The Cyber Investigation by the FBI
Gliniewiczs personal phone was located on his body and submitted to the FBI cyber lab for
extensive analysis. This process took several weeks. Eventually 6,500 pages of deleted mes-
sages were recovered by analysts from the phone. The messages were extremely incriminat-
ing and eluded to the theft of funds and money laundering.
The combination of his incriminating text messages and a forensic audit of his accounts
began to show a pattern of criminal activity. In March, 2015 a new village administrator had been hired
and immediately began a village wide inventory audit. Gliniewicz became concerned. Interestingly, one of
the deleted messages made reference to possibly setting up the new village administratoreven contem-
plating her murder.

Reconstruction
Pathology and laboratory analysis indicated that Gliniewicz shot himself twice with own H&K .40-caliber
weapon. The rst shot was self-inicted into his cell phone and vest approximately 175 feet from the death
shot. Later analysis revealed that Gliniewicz was standing when he self-inicted the second shot. Gliniew-
icz wedged the muzzle of his gun under the left side of his bullet proof vest and red the fatal shot into his
chest. He dropped his weapon and walked several feet falling face rst where he was discovered. Gliniewicz
appeared to have a high threshold for pain. The pathologist indicated that his wound would have permit-
ted him to live up to 2 minutes.
Advanced ballistic testing with the use of ultra-violet photographic equipment conducted by the North-
ern Illinois Regional Crime Lab conrmed that both gunshots were red in close range. Gunshot residue
was found in the interior of Gliniewiczs bullet proof vest cover when the second fatal round was red,
which indicated that the gun was placed underneath the vest cover when the fatal shot was red. It was
theorized that Gliniewicz had staged the scene to make it appear that he had chased the three men into
the woods or was forced into the woods, where he lost control of his weapon as he fought them using his
pepper spray, and baton during the struggle.
The three-subject scenario was based on a theory that because he was t and tactically trained he was
able to fend off one opponent, possibly two, but three attacking together would be more then even he
could handle. Gliniewicz wanted to create a scenario, in which, he bravely struggled against three oppo-
nents and succumbed to his injuries during a valiant battle. After a three-hour fact nding meeting with
members of the FBI, ATF, Illinois State Police, and others, investigators established that the evidence
supported a conclusion that Gliniewicz had staged his suicide to look like a homicide.

Interview with Commander George Filenko

I interviewed Commander Filenko who advised me that this two-month long investigation determined
conclusively that Lieutenant Joseph Gliniewicz intentionally committed suicide and left a staged trail of
police equipment consisting of pepper spray, a baton and his personal glasses at the crime scene to mislead
rst responders and investigators to believe that this was a homicide. It was learned through investigation
that Gliniewicz was familiar with this area. Gliniewicz, who had signicant experience in staging mock
crime scenes had conducted exercises at this location for his Explorer group.
The FBI Behavioral Analysis Unit had concurred that this was a staged scene in part because there
were no signs of Gliniewicz being dragged after the initial shot and no physical signs that he had fought for
his life. Commander Filenko said. We have also concluded that Gliniewicz strategically aimed the rst
of two shots from his own weapon at the lower abdominal area striking his cellular phone and bullet proof
vest which absorbed most of the impact of the rst shot.
The funeral for Lt. Joe Gliniewicz, drew thousands of mourners, including hundreds of police ofcers
from all over the country, before the nal results of the death investigation were completed. Commander
Filenko said that this cowardly act represented the ultimate betrayal of what it means to be an ofcer.
But, thanks to his work, and the tireless efforts of dozens of forensic experts and hundreds of police ofcers
from the federal, state and local levels, the truth about this astonishing case was ultimately uncovered.

Vernon J. Geberth is a retired Lieutenant-Commander with the New York City Police Department, and the
author of the highly inuential book, Practical Homicide Investigations.

Illustrations courtesy of Medical Legal Art Illustration www.doereport.com

JUNE 2016 Forensic Magazine | wwww.forensicmag.com 13
 feature
One-Step Fluorescent Fuming
Jeremy Malinge, Ph.D.

A
mong the existing protocols used by law enforcements around the world for ngermarks develop-
ment, ethyl cyanoacrylate fumigation is well adapted to reveal latent marks on non-porous or some
semi-porous surfaces covering potential evidences. In practice, the object of interest is placed into a
fuming chamber in which hygrometry is set at 80 percent. Cyanoacrylate is then heated up to 120 C (250 F)
leading to its vaporization in the conned volume of the chamber. The latent traces, consisting of bodily uids,
contain nucleophiles which may act as polymerization initiators to form a white polymer picturing the marks.
However, in the case of white or multicolored surfaces, a second development step is often required to enhance
the contrast between the marks and its support. Conventional methods often involve a dye staining process to
produce uorescent marks. Such post-treatment is usually time-consuming, requires additional expensive safety
equipment like fume hoods and drying cabinets, and chemical wastes management.
In 2011, a partnership between an emerging French company and the National Center for Academic
Research created a one-step development for latent marks, directly yellow uorescent (560nm) under
conventional forensic lighting. The challenge was to design a new emissive molecule light enough to
vaporize at the same temperature as the cyanoacrylate. Indeed, since the early 80s, many scientic efforts
were devoted to the improvement of cyanoacrylate fuming protocols in order to obtain direct uorescent
ngerprints.1 Many strategies were attempted to chemically modify the cyanoacrylate itself. However,
the solutions either required high fumigation temperatures or a specic heating apparatus, in some cases
producing highly toxic hydrogen cyanide gas.
To circumvent these technological issues, the consortium worked conjointly to develop a new emissive mol-
ecule that can be mixed with the cyanoacrylate and be vaporized at low temperatures. There are many known
emissive molecules but almost all of them were too heavy to be vaporized at 120 C (250 F). Thanks to the
expertise of CNRS, a novel emissive molecule, exhibiting a strong yellow uorescence was synthesized.2 As it
stands, the uorophore can be easily mixed with the cyanoacrylate and be vaporized at 120 C (250 F). Before
reaching the market, many tests were performed by forensic forces all around France, and since 2015, all the
French forensic forces are using the technology on every day caseworks. The traditional process involving both
fumigation and coloration steps has been abandoned. Indeed, since the dye vaporizes with the cyanoacrylate,
the subsequent polymer bers picturing the latent are directly uorescent with a high resolution. While the
coloration step was sometimes providing poor resolution (coloration of both the print and its support) and was
damaging the evidence (washing with solvent required), this new fuming technology affords reproductive results
rapidly without altering the evidence.
The new uorescent cyanoacrylate formulation allows direct fumigation at low temperature, meaning that
no modication of pre-existing fuming chamber is necessary. In addition, the intrinsic properties of the chosen
emissive molecule, allows prints visualization under a wide range of light source (325 nm and 470 to 530 nm)
already used by forensic technicians worldwide. Finally, the selected dye is fully compatible with DNA, mean-
ing that both papillary and genetic identications are possible on a single latent mark. For the rst time in the
forensic history, it is now possible to fume an entire room or vehicle and observe uorescent marks with forensic
lightings allowing new perspectives and saving time: just like watching CSI TV show!

References
1. Ramotowski, R. in Lee and Gaensslens Advances in Fingerprint Technology, 3rd ed., Ramotovski, R., 2013
2. Prete, C., L. Galmiche, et al. Lumicyano: A new uorescent cyanoacrylate for a one-step luminescent latent ngermark devel-
opment. Forensic Science International, 104-112, 2013

Jeremy Malinge holds a Ph.D. in Chemical Physics and is the R&D Manager at Crime Scene Technology.

14 Forensic Magazine | wwww.forensicmag.com JUNE 2016

 dna connection
the
Utilizing DNA Evidence Decades after Pitchfork
T
he news that convicted murderer Colin
Pitchfork was denied parole was shocking. Not
that he was denied, but that he was still alive.
Certainly, the rst case in history that utilized DNA
evidence in a forensic context had to be a very long
time ago. In truth, Pitchfork was put away 28 years ago.
Back then, there wasnt a single offender DNA database
in the world. Now, they are standard in over 50 coun-
tries and expanding almost on a daily basis. Weve gone
through RFLP, Castro and the admissibility wars, Bu-
dowle and Lander and Nature Magazine, NRC I (and II),
Dotson and Bloodsworth, and Simpson. We are even
looking at the reality of performing DNA analysis in 90
minutes in police stations. DNA databases have been
used to help convict serial killer Lonnie Franklin Jr.,
known as the Grim Sleeper, using familial testing, and
have also been used to exonerate 300 innocent people
and counting in the US alone.
On this odd recognition of the Pitchfork con-
viction, its important to realize that the changes
brought about by the integration of DNA technology
into the worlds criminal justice systems have been
systemic. Statutes of limitations have been altered
and even eliminated to allow for more exonerations
and to crack cold cases. The passage of legislation to
create DNA databases has created one of our more
effective crime fighting tools. But, the broadest im-
pact of DNA technology has been conceptual.
What started as a better piece of evidence has
become a better understanding of the weaknesses in
our system. Our concepts of quality forensic science,
reliable evidence and trustworthy convictions have
changed dramatically. Ultimately, thats a very good
change. I would even argue that our sense of respon-
sibility to that system has changed. We can do more
to protect the wrongly accused and the innocent vic-
tim, therefore we have the responsibility to do more.
While original claims of DNA-based exonerations
were met with skepticism and automatic objection,
prosecutors now take a more thoughtful approach.
JUNE 2016
Chris Asplen
But, while we should appreciate the relative light-
ening-like speed with which we have leveraged the
benefits of DNA in a criminal justice system de-
signed to move slowly, we should also recognize how
far we have to go. Four hundred thousand untested
rape kits nationwide? Seriously? It shouldnt be news
that the Grim Sleeper was convicted with famil-
ial DNA analysis. It should be standard operating
procedure.
Somewhat ironically Ive spent the week in
Manila, the Philippines with forensic DNA pioneer
George Sensabaugh speaking to law and forensic
science students about the impact that DNA has had
on criminal justice systems since its introduction. In
other words, none of my audience was alive for the
Pitchfork conviction, and many werent even around
when O.J. Simpson was declared not guilty. As I
looked at the picture of Pitchfork on my PowerPoint
slide, and talked about all the future applications of
DNA technology that were contained in that one
case, it struck me that our next responsibility is to
keep the next generation of forensic scientists, pros-
ecutors and defense attorneys inspired. Newness and
novelty were great motivators for the scientists and
attorneys responsible for DNAs seismic impact over
the last two decades. But DNA has been around long
enough now for Colin pitchfork to qualify for, and be
denied, parole.
As a new generation of scientists and lawyers
integrate into criminal justice systems throughout
the world, its important to ensure that they are not
just good scientists and lawyers. As emphasized at
our conference in Manila, science in the service of
society, must remain the core message of our educa-
tional efforts.
Chris Asplen is the attorney in charge of the Life
Sciences practice at Hill Wallack, LLP, and works with
the US Department of State and the United Nations as a
legal expert.
Forensic Magazine | www.forensicmag.com 15
 feature
Forensic Palynology
Tracking the Near Invisible
Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Seth Augenstein
Byline

W
hen the little girl known as Baby Doe was found in a plastic bag on a Massachusetts beach, investi-
gators had to keep their geographical possibilities open on the case. The girl could have been from

F
xxxxxx
virtually anywhere in North Americaor even beyond.
But it was the painstaking work of Andrew Laurence, a forensic pollen expert, that centered the
search in the local region. Some of the trace spores on the girls clothes and blanket showed the partic-
ular mix of oaks and pines and other ora native to Massachusetts. In fact, it even identied an exotic
cedar which further narrowed the search. The girl was later identied as Bella Bond, and her mother
and her mothers boyfriend are now awaiting trial on murder charges, partly on the microscopic detec-
tive work of Laurence.
Palynology gathered headlines from the public in the months since the high-prole breakthrough. This
week Laurence, program analyst for U.S. Customs and Border Protection, Laboratories and Scientic Ser-
vices Directorate, also helped make revelations on a 1981 cold case in Ohio, in the hopes the microscopic
evidence could crack the decades-old murder.
But theres just one catch: Laurence is pretty much a one-man band in American palynology. Only he and
his mentor Vaughn Bryant are trained to do the delicate forensic workand Bryant is often subsumed in his
academic responsibilities at Texas A&M University.
Basically, if anyone wants an analysis done, its me or Vaughn, Laurence told Forensic Magazine in an
exclusive interview. I have a fairly large backlog right now.
About 1,000 trained palynologists are working in the world right now. But the vast majority are employed
in the oil industry, since they are a vital resource to tell drillers how far back they are in time at certain depths
as they pursue fossil fuels, according to Laurence.
Only ve worldwide are currently pursuing forensic work.
Part of the difculty is the exacting combination of disciplines the work relies on. Geography, archaeology,
geology, climatology, and basic chemistry all go into the labor-intensive work.

Hardy grains, investigative

Andrew Laurence, program analyst for the US Customs and Border
Protection, Laboratory and Scientic Services Directorate.
breakthroughs
The startling analysis is made possible by the
hardy little traces of trees and plants that are
around us all, all the time.
Each region has a signature that is indicated
by the mix of the spores: in the case of Baby
Doe, it was some 39 different types of spores
which were in her clothes, on her blanket, and
even stuck in her hair, Laurence said.
Laurence has to process all those minute
traces carefully with a gentle vacuuming
process. The lter is removed, and dissolved
with a series of chemicals: an acetolysis solution

16 Forensic Magazine | www.forensicmag.com JUNE 2016

 involving acetic anhydride and sulfuric acid, hydro-
uoric acid, and hydrochloric acid.
The debris and junk is removedleaving the
precious pollen spores, which are hardy and survive
the breakdowns (the structures even survive cycles
through a washing machine).
The distinct parts of the geographic recipe are left,
which Laurence then analyzes manually. Leads come
from the minute nuances on the slide under the
microscope.
For instance, the pollen on the 1981 Ohio homi-
cide victim, now known only as the Buck Skin Girl,
gives a wealth of information. It shows that her long-
time place of living was in the Northeast, since it
showed a mix of oak, pine, hickory, beech, chestnut,
and sweetgum. Most of those are found throughout
the Eastern U.S., but the traces of spruce further
narrowed down to a northern area.
All those grains were generally older and beat-up
from wear and tear and washing. The newest traces
were instead from spores from the American or Mex-
ican West, including mesquite and joint r, which
appeared brand-new. Andrew Laurence works on forensic cases using palynology,
They were in excellent condition. They were the study of pollen.
very recent, he said. Most of the Eastern pollen Children, which also led to his work on the Buck
grains were in very bad condition, like they had been Skin Girl case.
washed many times. Laurence, who grew up in the Cleveland, origi-
nally had aspirations to be a Navy pilot. But he was
Spores and cold cases sidelined by an injury early on in the Merchant Ma-
Laurence also noted the heavy soot which was locat- rine Academy. He switched to archaeology studies
ed in the clothes. That could indicate the girl was at Kent State, and later on was lured to the exacting
spending a lot of time in an urban environment with work because of Bryants experience at Texas A&M.
industrial areas nearbyor could have been hitch- The federal agency hired him right out of school,
hiking alongside the road with the exhaust from cars several years ago.
swirling constantly around her. Laurence told Forensic Magazine he wasnt
One working investigative theory is that the girl aware of other people being trained at his old
was from the Northeast, had traveled to the South- school or elsewhere in the forensic applications
west, where she could have picked up the buck skin of pollenbut the discipline could use more
jacket, and pollen traces, before being killed on the people.
way back home. I hope, he said, with a chuckle. Right now, we
The National Center for Missing and Exploited are the only agency doing this.
Children said they were hoping putting a new face
out with the new geographic leads could help crack Seth Augenstein is a science writer at Advantage
the 35-year-old case. Business Media. He previously worked as a crime beat
Laurence spends most of his time on intelligence reporter at the The Star-Ledger. His other work can be
work and national security cases. However, the found at www.sethaugenstein.com.
Baby Doe case was jump-started by a collaboration
with the National Center for Missing and Exploited

JUNE 2016 Forensic Magazine | www.forensicmag.com 17

 f orensic PATHOLOGY:
Judy Melinek, M.D.
expert witness
Mind Your Manners
Where Death Certication Ends and Prevention Begins

T
he police pick up a 45-year-old man, a robbery
convict, for speeding. The arrest is a parole
violation. The man has a history of smoking
and substance abuse, and is obese. On his third day
back in jail, he refuses to cooperate during a routine
search of his cell. The corrections ofcers address
this behavior problem by strapping the man into
a restraint chair for
several hours until he
calms down. After he
is released, he immedi-
ately starts a ght with
another inmate. Once
again the guards strap
him into the restraint
chair, for several more
hours, until he is
compliant. The man
goes back in the chair
twice more over the
course of the next
four days. After the
Dr. Judy Melinek is a forensic nal time, he stands
pathologist and does autopsies upand then, without
for the Alameda County Sheriff
a word, collapses. Hes
Coroners ofce in California.
lying on the oor of
the jail, unconscious. He is not breathing. The guards
initiate CPR immediately, but after a few minutes the
man is still not breathing and no longer has a pulse.
The guards continue CPR until paramedics arrive ten
minutes after the mans collapse. The medics declare
him dead.
The forensic pathologist conducting the autopsy
nds that the man has a large saddle pulmonary
embolus and blood clots in both legs associated with
the strap marks from the restraint chair. The cause of
death is clearpulmonary embolus. Whats the man-
ner, though? A blood clot traveled from the mans
legs to his lungs. Obese smokers commonly develop
dangerous blood clots, so should this be certied as
natural? The man had been immobilized and showed
signs of injury on his legs from the restraint straps, so
is this death an accident? But, waithis immobiliza-
tion was forced. He had been restrained and injured
at the hands of the guards. This prisoners death
should be a homicide. How about undetermined? Sui-
cide is the only manner of death we would categori-
cally discount.
Medical examiners and coroners agonize over
manner of death all the time, and for good reason.
The cause of death, the disease or injury leading to
the lethal event, may be patently clear, but its the
manner of death that the family hears and that the
press pounces on. Call an in-custody death such as
this one a homicide, and the media will immediately
pronounce that the police killed the inmate, even
if the corrections ofcers were only following their
training and jail protocol. Call an in-custody death
accident or natural, and you might be accused of a
cover up. Call it undetermined (a way of saying the
death doesnt fully categorize into one manner or an-
other) and no one is happy: You get branded as either
unscientic or indecisive. Or, both.
What is manner of death?
The manner of death is a required part of the death
certicate, a system of classication most often used
for data analysis in the realms of public health and
academic research. Every time you read an article
that contains information about the ways people
die, or compares types of deaths across geographic
regions, the researchers likely started their analysis
with publicly available death certicate data, sorted
by manner of death.
But manner of death has a social function as well,
because, like it or not, we attach different moral
value to different ways of dying, even when the
mechanism is the same. In my experience, families
who have lost a loved one to a drug overdose dont
object to the determination that the cause of death

18 Forensic Magazine | www.forensicmag.com JUNE 2016

 was by acute mixed drug intoxication. Nor do they avoidable death will repeat with others under similar
object to my manner ruling that the overdose was circumstances. If we dont publicize it in the press,
an accident or a suicide, in some cases because of how will others learn from our experiences and adjust
religious prohibitions against suicide. their policies accordingly, before the next death?
One Pennsylvania coroner has been in the news The next time it happens, what will you do about it?
lately for classifying overdoses of illegal drugs as Will you call it another homicide, another accident,
homicides, so that the drug dealers will be prosecuted another natural death? Whatever your answer, you
for murder, even if the user injected the drugs himself will have a harder time explaining why another such
in order to get high. Sounds like a good idea, right? corpse has come to a slab in the morgue, and why
Drugs are illegal and the dealers should be punished. you didnt do anything to stop it getting there. We
The problem is, such an approach conates the duties forensic pathologists are physicians working in the
of scientic death classication with those of law realm of public health. Our jobour dutydoes not
enforcement. Our job is statistical and unbiased, and end with the death certicate.
we need a uniform classication system in order to
understand how people die in the real world, and to Dr. Judy Melinek is a forensic pathologist and does
study regional differences. Coroners in jurisdictions autopsies for the Alameda County Sheriff Coroners ofce
surrounding this Pennsylvania county have avoided in California. Her New York Times Bestselling memoir
following suit with this reclassication of manner in Working Stiff: Two Years, 262 Bodies, and the Making
drug deaths. of a Medical Examiner, co-authored with her husband,
T.J. Mitchell, is now out in paperback. She is the CEO
Just the beginning of PathologyExpert Inc.
We in the forensic sciences must work to commu-
nicate with the police, the families of decedents, and
with the public at large about the different manners
of death, about the national standards used in classify-
ing deaths, and about our decision-making process in
arriving at a conclusion in each individual case. We
must do so as part of our professional duty to public
health in seeking to reduce our national burden of
avoidable deaths. We spend a lot of time agonizing
about the mannerbut the determination of manner
doesnt matter if we dont then do something to coun-
sel the decedents family, to explain what happened to
the public, and to prevent this from happening again,
if what happened was at all preventable.
Some jurisdictions will call our hypothetical case
study of the prisoner with the embolus a homicide.
Others might call it an accident. A few might even
decide this was a natural death. Regardless, they will
all be remiss if they stop with cause and manner. We
coroners and medical examiners have an ethical duty
to do more than just check a box on a death certif-
icate and wait for the inevitable lawsuit. We have
a duty to reach out to those in power to change the
lethal environment by educating the jail staff and the
corrections department managers who write the pol-
icies and procedures. If we dont reach out to other
professionals in other county agencies, one mans

JUNE 2016
 ColdCase
CHRONICLES
The Black Dahlia: The Murder of Elizabeth Short
T
he murder of the Elizabeth Short, better known as
the Black Dahlia, is the most infamous unsolved
murder in Los Angeles history. She was a beautiful
heroine of a real-life lm noir that ended with her brutal
murder. For decades, detectives and journalists investigated
the slaying of Elizabeth Short and put forward their own
theories about the identity of the murderer. The FBI le
on the Black Dahlia murder is probably one of the best
resources of the early days of the investigation.1
Elizabeths body was discovered on January 15, 1947 in
a vacant lot in a residential neighborhood and the FBI
became involved the very next day. But the Bureaus role
was purely to provide assistance to the LAPD for things
like analyzing evidence and checking the backgrounds
of suspects. The FBIs le is not an all-inclusive resource
on the murder investigation, which it admits, because it
doesnt have nearly has much detail as the LAPD les.
But it does shed light on the investigation, evidence, and
suspects.2
The le contains internal communication within the
FBI regarding the case, letters from random people to J. Ed-
gar Hoover with tips about the killer and the case, reports
on forensic evidence, and newspaper clippings.
Last Days and Discovery
Elizabeth was born on July 29, 1924 in Boston, Mass. In
January of 1943, she moved to Santa Barbara and applied
for a job at the Post Exchange at Camp Cooke, an Air
Force Base, where she provided her ngerprints as a routine
part of the application process. On September 23rd of that
year Elizabeth was arrested by the Santa Barbara Police for
underage drinking and sent home to Massachusetts.1
Short moved back to Southern California in July of
1946, and, for the next six months, she moved between Los
Angeles, Long Beach, and San Diego. She was last seen
alive on January 9, 1947 by Robert Red Manley, a man
she had once dated, dropped her off at the Biltmore Hotel.1
The morning of January 15, 1947 a mother walked with
her daughter across a vacant lot on Norton Avenue near
39th Street when she noticed the form of a woman in the
grass near the sidewalk. At rst she thought she was looking
at a mannequin but, as she walked closer, discovered that
it was the body of woman who had been cut in half at the
waist.2
20 Forensic Magazine | wwww.forensicmag.com
Dolly Stolze
The mother called the
police and dispatch alerted
patrol units in the area over
the radio. Because newspaper
reporters also listened to the
police radio bands, journal-
ists from the Los Angeles
Examiner were the rst people
on the scene. According to
an FBI memo dated February
20, 1947, the press arrived at
the scene before police, took Dolly Stolze is a researcher
pictures of the unidentied and editor at Strange
body, and handled some of Remains, a blog site that spe-
the evidence. cializes in forensic science,
Harry Hansen and Finis bioarchaeology and bizarre
history.
Brown were the lead LAPD
detectives assigned to the case. When Hansen and Brown
arrived at the scene they quickly determined that the un-
identied woman had been killed and drained of her blood
somewhere else and dumped in the lot.
Autopsy and Evidence Collection
On January 16, 1947 assistant chief deputy medical
examiner of Los Angeles, County Frederick Newbarr
performed the autopsy on what was still a Jane Doe.
Newbarr determined that her cause of death was
hemorrhage and shock due to concussion of the brain
and lacerations of the face. Also, despite disappearing a
week prior, she had been dead been dead about twelve
hours, thats probably why the date of death on the
death certicate is listed as January 14th or 15th.1
The unidentied woman had three deep abrasions over
her right eye and had small pieces of esh incised from her
body. Most notably the corners of her mouth had been cut
three inches while she was alive. Also, her body had been
cleanly bisected post-mortem between the second and
third lumbar vertebrae. None of the internal organs were
damaged except for where the intestines were severed.1
The body was scrubbed so thoroughly that the autopsy
surgeons found bristles from a brush on the chest and
among the internal organs. These bristles were submitted
to the FBI for analysis. The FBIs report on the bristles
didnt note anything distinctive about the bristles. They
JUNE 2016
 were plant bers, maybe palm tree, used inexpensive
brushes.1
Identication of Elizabeth Short
Fingerprints were taken during the autopsy in order
to identify the body. On January 16, 1947, thanks to a
coordinated effort with Detectives Hanson and Brown,
the Los Angeles Examiner, the Washington Bureau of the
Hearst Newspapers, and International News Photos, the
Jane Does ngerprints were transmitted to the FBI in DC
with soundphoto equipment, an early fax machine system
designed to transmit photos for news agencies. This almost
instantaneous transmittal of forensic evidence for analysis
was unique for the time and praised as a feat of technologi-
cal innovation and interagency coordination.1
The FBI received the pictures of the Jane Does nger-
prints the morning of January 16th and ran them against
their catalogue of more than 104,000,000 prints. A few
hours later the identication was made as 22-year-old Eliz-
abeth Short of Boston, MA. The Bureau matched the Jane
Does ngerprints to criminal prints submitted by the Santa
Barbara Police Department for Elizabeth Shorts underage
drinking arrest, and a national defense print submitted by
Camp Cooke when she applied for a job at the base.1
Although her friends called her Beth and Betty, the press
almost immediately dubbed her the Black Dahlia. There
isnt a consensus about how Elizabeth Short got the nick-
name. Some say she inspired it when she was alive because
of her fondness for black hair and black clothes. Others
say that the nickname came about post-mortem and was
inspired by the 1946 lm noir classic The Blue Dahlia.1
Suspects, Leads, and Dead Ends
Over the next six decades police followed countless leads,
questioned hundreds of people, and received dozens of false
confessions. In the days and weeks immediately following
the discovery of Shorts body, newspapers hypothesized that
Shorts murder was related to unsolved homicides in San
Diego and Los Angeles.
On January 17, 1947 The L.A. Daily News published
an article titled Grisly L.A. Murder Similar to Slaying
of Seven San Diego Women in it was hypothesized that
Elizabeth Shorts slaying was related to seven unsolved ho-
micides in the area because Short had spent a few weeks in
San Diego shortly before she died.1 Then The Los Angeles
Examiner speculated on February 19, 1947 that the Black
Dahlia murder was related to the killing of Mrs. Jeanne
French 45 year-old nurse and aviatrix, whose nude and
beaten body was found on February 10, 1947. But this line
of thinking went nowhere.1
JUNE 2016
Then a person, who said they were the killer, started to
taunted the press and the police. The editor of Los An-
geles Examiner received a call from a person claiming to
be the Elizabeths Shorts killer on January 23, 1947. The
anonymous person claimed to have Elizabeths belongings
and offered to mail them to the newspaper. The next day
the postal service intercepted a package with the following
message spelled with letters cut from newspaper clippings,
Here is Dahlias belongings letter to follow. The package
contained Shorts birth certicate, photographs, a claim
ticket for a bus station locker, diary, and address book.1
On January 26th the Examiner received a hand-written
letter that said: Here it is. Turning in Wed, Jan 29. 10
A.M. Had my fun with police. Black Dahlia Avenger. The
time came and went but no one showed up.3
They did run the prints on the letter but found no match
in their collection. The FBI took no further action because,
as stated in an FBI communication on March 7, 1947, No
subsequent mail or communications contained any material
to indicate the writers have any knowledge or connection
with instant case.1
Detectives investigated everyone in Elizabeths life:
ex-lovers, people pictured with her in photographs, and
names mentioned in address books. Some of these suspects
are documented in the FBIs Black Dahlia le in internal
memos and newspaper clippings. The LAPD asked the
Bureau to run background checks, check criminal records,
and analyze ngerprints with latent prints related to the
case. They checked out John Henry Shippey, who posed in
a picture with Elizabeth; Peter Vetcher, an ex-lover who last
saw her in 1946; Jeff Connors, real name Arthur Lane, a bit
player in lms who admitted to seeing Elizabeth Short the
night she disappeared; and Robert Red Manley, who was
one of the last known people to see Elizabeth alive. Again
the LAPD hit a dead end.1
References
1. FBI Records: The Vault. Black Dahlia (Elizabeth Short). Retrieved
from: https://vault.fbi.gov/Black%20Dahlia%20(E%20Short)%20
2. The Black Dahlia Murder, (2003). Retrieved from: https://www.
fbi.gov/news/stories/2006/october/dahlia_102006
3. Hodel, S. (2006). Black Dahlia Avenger: The True Story. New
York, NY: Harper Collins.
4. Ex-Cop Cites New Evidence His Dad Was Black Dahlia Killer.
(2014). Retrieved from: http://www.nbcnews.com/news/us-
news/ex-cop-cites-new-evidence-his-dad-was-black-dahlia-n119861
Dolly Stolze is a researcher and editor at Strange Remains, a
blog site that specializes in forensic science, bio-archaeology and
bizarre history. She has a masters degree in forensic anthropology
from California State University, Los Angeles.
Forensic Magazine | wwww.forensicmag.com 21
 Digital
Encrypted Cell Phones
N
ational and international headlines were made
recently when the U.S. Government served
Apple with a court order to assist the FBI
in cracking the passcode on an iPhone used by San
Bernardino shooter Syed Farook. This appears to be a
reasonable request as it concerns matters of national
security. However, the request may exceed the author-
ity of the All Writs Act of 1789 and conict directly
with the Fourth Amendments search and seizure
protections which extend to police searches of places
and items (i.e. cell phones) in which an individual has
a legitimate expectation of privacy. Encryption is cen-
tral to the discussion as it involves an individuals right
to privacy vs. the needs of law enforcement to conduct
a criminal investigation.
Encryption Basics
The purpose of encryption is to secure sensitive infor-
mation from being readily accessed by an unauthorized
user. Encryption is essentially a mathematical transfor-
mation which uses a program called an algorithm or
cipher to transform accessible data or information such
as an email or photograph (plaintext) into an unin-
telligible code (ciphertext) which cannot be read or
understood by normal means. After being transformed,
a cryptographic key (a long string of data) works like
a password to protect the data or information. The
plaintext appears as random meaningless gibberish
and does not reveal anything about the content of the
original data. Once encrypted, no person (or machine)
can discern anything about the content of the original
data by reading its encrypted form.
Encryption is a reversible transformation. Each
encryption and decryption function requires a
cryptographic key (a string of binary digits used as
an input to encryption and decryption functions).
To decode the encrypted data and render it back to
plaintext that can be easily understood, both the en-
cryption and decryption functions must use the same
cryptographic key. This is referred to as Symmetric
key encryption. There is no other way to read the
ciphertext. If for some reason the ciphertext cannot
be reversed back to its original unencrypted plain-
22 Forensic Magazine | www.forensicmag.com
DIGITAL FORENSIC INVESTIGATION
forensic insider
John J. Barbara
text form, the encrypted data will remain unread-
able and unusable. Another form of encryption is
Asymmetric encryption. It uses two different keys,
one to encrypt the data and another one to decrypt
it and is often referred to as public key encryption.
Users generally make the encryption key public,
but keep the decryption key private. Thus, anyone
can send an email or file encrypted with the public
key, but only the recipient can decrypt it using the
private decryption key.
iPhone Encryption Basics
Apple has integrated encryption into the hardware
and rmware of their iPhones. The iOS uses a dedicated
AES 256 bit cryptographic engine in conjunction with
a SHA-1 cryptographic hash function which resides
between the main system memory and the ash storage.
Every iPhone also includes a Unique IDentier (an
AES 256-bit key fused into the application processor)
which causes the data to become cryptographically
linked to a specic iPhone. It cannot be tampered
with, bypassed, accessed by any software or rmware,
and is not recorded anywhere. Data les are associated
with specic classes, each supporting different levels
of accessibility. Each classs encryption and decryption
operations are based upon a complex key hierarchy: the
UID and passcode, class keys, le system keys, and per-
le keys. Per-le keys encrypt the les and the class key
functions along with the per-le keys and are stored in
the le metadata. File system keys encrypt the metadata
and the UID and passcode serve to protect the class key.
Cell Phone Data and Information
Whenever a text message is sent, a photograph
uploaded to a social media account, or a mapping pro-
gram is used, much of the data migrates to the comput-
ers owned by cell phone providers. However, not many
people realize that information is also being stored on
the cell phone itself.
s Text Messages
Text messages transmitted from one phone to another
pass through the computer systems of the providers who
JUNE 2016
 retain metadata such as information on when text mes-
sages were sent and to whom. This metadata is generally
used for billing purposes. The actual body of the text
messages is only stored for as long as it takes to transmit
and then is deleted by the carrier. Apples messaging
app, iMessages, works differently. There is no metadata
as it is all sent to and from Apple itself. Cell networks
transmit the encrypted message to Apples servers or
if sent via Wi-Fi, bypass the cellular carriers. Messages
that have been backed-up can be recovered. Apple does
not retain the messages as they are routed from phone
to phone.
sPhotos
Photographs remain until they are shared, backed-up,
downloaded, and/or deleted. Even after being deleted,
its possible they can be recovered using sophisticated
forensic software. A user can set up a smartphone to
manually or automatically save his/her pictures. Syed
Farooks iPhone had apparently not been backed up
for at least a month thus it is possible it may con-
tain pictures that could be of immense investigative
potential.
s Email, Contacts, and More
Email providers normally store user generated emails
on their servers which can be accessed via a search
warrant or subpoena. Emails can also be saved on the
cell phone itself. The users Contact list is only stored on
the cell phone (unless it was backed-up somewhere to a
cloud computer). Information such as the users browser
history, a list of movies watched, any records pertaining
to purchases made online, self generated notes and doc-
uments, documents received as attachments to emails,
and any user generated videos can also be found on the
cell phone.
sTracking Where You Are or Where Youve Been
Most individuals do not realize that a cell phone pro-
vider can use multiple towers to triangulate the location
of a specic cell phone in real time (such as when a
911 call is made). Although not always precise, records
regarding when and where normal calls originate are
sometimes maintained by providers for a year or more.
A considerable amount of geographic data can be
stored on the cell phone. Since smartphones have GPS
JUNE 2016
microchips, it is possible to trace everywhere the phone
has been! For instance, Google Maps Timeline stores
precise, detailed location data. The iPhones Frequent
Locations can provide a listing of specic locations as
well as when and how often the location was visited.
For instance, if you went to work twenty days last
month, not only will it tell you that, but also what time
you arrived and left each day! If this feature was oper-
ating on Syed Farooks iPhone, it would be invaluable
information.
Summary
Smartphones contain the most intimate data of our
everyday lives. Not only do they contain our credit card
and nancial information, but also record where we go,
who we talk with, what photographs we have taken,
who are contacts are, what social media services we
frequent and so forth. All of this information can be
exploited by hackers, identity thieves, advertisers, or
government entities.
So, why would anyone want to encrypt his/her cell
phone? Fairly obvious. Needless to say, the cell phone
contains a virtual goldmine of personal and private
information. Current technology makes it impractical
to brute force crack an encrypted cell phone, especially
one that has a limit on the number of unsuccessful
tries before the data is totally corrupted or erased.
There is no easy resolution to the inherent conict
of an individuals right to privacy and the needs of
the government to protect us. If a company can be
compelled to compromise its own security features and
protections for its cell phones and customers, virtu-
ally every piece of personal and nancial data may
become readily available to a potential hacker. On
the other hand, not having access to an encrypted cell
phone will certainly hinder law enforcement criminal
investigations and perpetrators of horrendous crimes
may remain at-large. Whats the solution? Whats the
compromise?
John J. Barbara owns Digital Forensics Consulting,
LLC, providing consulting services for companies and
laboratories seeking digital forensics accreditation. An
ASCLD/LAB inspector since 1993, John has conducted
inspections in several forensic disciplines.
jjb@digforcon.com
Forensic Magazine | www.forensicmag.com 23
 Who says you
Cant do that?
Crime Scene Vehicles: The Right Vehicle for the Job
A
ccess to the appropriate equipment is key to
processing a crime scene. A good crime scene kit
is an obvious rst step. But you also need to think
beyond the basics. What other equipment will you need?
How will you ensure that equipment is available when you
need it? A crime scene vehicle provides a convenient way
to store and transport essential equipment, allowing you
to process evidence at the scene. Choosing the right crime
scene vehicle will depends on your needs.
The simplest and cheapest solution to the problem of
storing and transporting equipment is to load everything
into the trunk of a patrol car. Many agencies in areas with
low crime rates and tight budgets rely on this solution.
In general, it works neespecially when youre talking
about the basic equipment that every crime scene in-
vestigator should bring to every scene. Supplies such as:
ngerprint and photographic equipment, blood collection
and evidence packaging supplies, casting and impression
equipment, biohazard kits, and miscellaneous measuring
devices, labels, cutting tools, and ashlights.
Relying on the trunk of a patrol car has some obvious
drawbacks. First, its difcult to keep equipment organized.
In addition, patrol cars have limited space; you may run
into a problem if a scene requires special equipment. For
example, items such as extra lighting sources, large tents,
and privacy screens wont t into the trunk. You will need
access to a larger vehicle to get those items to the scene.
Because of these problems, many agencies opt to
purchase a separate vehicle to handle their crime scene
investigation equipment. Examples include panel or box
Advertiser Index
Labconco Corporation ............................................... 26
www.labconco.com
Life Technologies...................................................... 28
www.thermosher.com
Promega Corporation ...................................... 2, 25, 27
www.promega.com
24 Forensic Magazine | www.forensicmag.com
Dick Warrington
vans, box trucks, or old ambulances. All of these vehi-
cles have the benet of providing extra storage space. By
adding shelves and other storage containers, you can make
it easier to keep your equipment and the evidence you
gather organized and well-protected. Ambulances are often
an especially good choice for a crime scene vehicle because
they already have built-in containers that can be retro-
tted to your needs. Ambulances, box vans, and box trucks
also have the advantage of being large enough to walk
around in comfortably. These vans and trucks may also be
equipped with their own generators, lighting systems, and
work stations.
Being able to move comfortably inside your vehicle can
be a huge advantage. Depending on just how much room
you have to maneuver, you may be able to le reports,
send data, and process your evidence right at the scene.
Performing these tasks at the scene can save you time
and help with your investigation, especially when youre
dealing with major crimes.
The next step up from retrotting an existing vehicle is
purchasing a customized mobile crime scene lab. The two
basic types of labs are a container style that needs to be
delivered to the scene, and a motorized style that can be
driven to the site. Once the container is delivered by the
semi-trailer to the scene, it takes about 45 minutes to set it
up. Motorized vehicles, on the other hand, are built on a
bus or RV-type platform and do not require any additional
set-up time. Most labs will likely contain their own genera-
tor, water supply, fuming chamber, copy stand for photog-
raphy, computer work stations, portable lighting sources,
and additional stations for processing items for ngerprints.
Take the time to think about both your current needs and
your future needs.
Finding the right mobile crime scene vehicle for your
agency is a complicated task. It involves looking carefully
at your cases, your expertise, and your budget. Once you
gure out the right way to balance the need for storage
space and work space, then you can decide what vehicle or
combination of vehicles will help you get the job done.
Dick Warrington is retired from the Shawnee County Sheriffs
Department in Topeka, Kan. where he spent 25 years in law
enforcement. He is now a training instructor for the Lynn
Peavey Company. dwarrington@peaveycorp.com
JUNE 2016
 Discover the CE
youve been missing

LAST SAMPLE!!

Come on a journey of discovery to see what the Spectrum CE System can do

for you. Built and supported by Promega, Spectrum is thoughtfully designed
to provide user-friendly software, more information from challenging samples,
and greater exibility and efficiency in processing samples.

Sign up for the e-newsletter to discover all the delightful details that make
Spectrum a CE worth waiting for. www.promega.com/Spectrum2016

2016 Promega Corporation. All Rights Reserved. 28131450

 Labconco forensic enclosures deliver
How unique features that matter the most.
Solving crimes can be complicated. Let Labconco forensic
do you enclosures, developed with input from forensic experts,
process the evidence so you can solve the crime. It really

make is elementary.

t
.JDSPQSPDFTTPSDPOUSPMMFE
QSPHSBNNJOH
GPS
WFSTBUJMJUZ

crime-solving




BOE
QSPUPDPM
n
FYJCJMJUZ
t
%JHJUBM
QBSBNFUFS
GFFECBDL
GPS
IJHIFTU
RVBMJUZ
DPOTJTUFOU
SFTVMUT

easier?



t
4VQFSJPS
NBUFSJBMT
PG
DPOTUSVDUJPO
GPS
EVSBCJMJUZ
BOE
FBTF




PG
PQFSBUJPO
'PS
NPSF
JOGPSNBUJPO
DBMM
800.821.5525
PS
WJTJU
www.labconco.com/forensics
Elementary.

Protector
Evidence Drying
NEW!
Cabinet CApture BT
Fuming
Chamber

CApture
Portable Fuming
System

Protector Downdraft
Powder Station

,BOTBT
$JUZ
.0
]
 Made in the USA

XXXMBCDPODPDPN


f
Hear about the latest developments in forensic
DNA at ISHI 27, the largest symposium to focus
on DNA typing for human identication. Network
with forensic scientists from around the world, and
advance your understanding of the current and
future state of the eld.

Register by August 1 and save $100

on the conference registration fee.

Learn more at: ishinews.com

MINNEAPOLIS, MN SEPT. 26 29, 2016

2016 Promega Corporation. All Rights Reserved. 27984474

 you trust
Condence from quality results
Integrated solutions for sexual assault casework
Comprehensive and integrated solutions for sexual assault casework from Thermo Fisher Scientic are designed
to deliver maximum efciency and condence. Featuring 3 of our most powerful Applied Biosystems kits, this
total workow enables precise information the rst time through.

Solutions include:
Quantiler Trio DNA Quantication Kit for simultaneous quantitative and
qualitative sample assessment to streamline workow and decision making
GlobalFiler PCR Amplication Kit for high sensitivity and discrimination
with 6-dye, 24-locus technology
Yler Plus PCR Amplication Kit for high discriminatory power due to
7 rapidly mutating Y-STRs

Watch a video of these kits in action

thermosher.com/sexualassaultsamples

Unless stated otherwise in the individual product labeling, products listed are For Research, Forensic, or Paternity
Use Only. Not for use in diagnostic procedures. 2015 Thermo Fisher Scientic Inc. All rights reserved. All trademarks
are the property of Thermo Fisher Scientic and its subsidiaries unless otherwise specied. CO018805 0915