The investigator issue 1 2013 by The Investigator

Investigator t he

Issue 1 2013

www.the-investigator.co.uk

ESSENTIAL READING FOR TODAY’S INVESTIGATORS

T he Frost Phe nomenon

T h e sec ret s of eﬀe c4 ve de c i si on m a k i ng Also inside this issue

Digital Forensics Insight

Homicide Working Group

Forensics Europe Expo Preview

A Samsung Galaxy MP3 See page 6

Advance Knowledge

T ake a q ualified approach approach Take qualified to D NA submissions submissions DNA : H NQRZ WKDW '1$ SURÂ¿OLQJ FDQ KHOS XV WR HVWDEOLVK :H NQRZ WKDW '1$ SURÂ¿OLQJ FDQ KHOS XV WR HVWDEOLVK ZKHWKHU RU QRW D VXVSHFW FDQ EH OLQNHG WR D FULPH %XW XQWLO FULPH VFHQH VDPSOHV KDYH EHHQ DQDO\VHG LQ WKH ODE XQWLO FULPH VFHQH VDPSOHV KDYH EHHQ DQDO\VHG LQ WKH ODE ZH FDQÂ¶W EH FHUWDLQ WKDW WKH\ ZLOO FRQWDLQ KXPDQ '1$ ZH FDQÂ¶W EH FHUWDLQ WKDW WKH\ ZLOO FRQWDLQ KXPDQ '1$ LQ VXIÂ¿FLHQW OHYHOV RI TXDOLW\ DQG TXDQWLW\ WR JHQHUDWH D XVDEOH SURÂ¿OH

,Q MXVW PLQXWHV \RX FDQ LGHQWLI\ ZKHWKHU D VDPSOH FRQWDLQV KXPDQ '1$ \RX FDQ VFUHHQ XS WR IRXU DW RQFH

FRQWDLQV KXPDQ '1$ \RX FDQ VFUHHQ XS WR IRXU DW RQFH FRQWDLQV KXPDQ '1$ \RX FDQ VFUHHQ XS WR IRXU DW RQFH DQG FKRRVH WKRVH PRVW VXLWDEOH IRU IXUWKHU ODE DQDO\VLV

2XU LQQRYDWLYH 3DUD'1$ VFUHHQLQJ V\VWHP HQDEOHV \RX 2XU LQQRYDWLYH 3DUD'1$ VFUHHQLQJ V\VWHP HQDEOHV \RX WR HVWDEOLVK WKHVH IDFWV ULJKW IURP WKH VWDUW VR WKDW \RX FDQ SUHGLFW ZLWK FRQÂ¿GHQFH ZKHWKHU RU QRW DQ\ VDPSOHV VXEPLWWHG IRU IXUWKHU DQDO\VLV ZLOO GHOLYHU D XVDEOH SURÂ¿OH <RX FDQ IDVW IRUZDUG WR WKRVH VDPSOHV PRVW OLNHO\ WR EH <RX FDQ IDVW IRUZDUG WR WKRVH VDPSOHV PRVW OLNHO\ WR EH LQIRUPDWLYH DQG DYRLG WKH WLPH DQG FRVW RI UXQQLQJ WHVWV RQ VDPSOHV WKDW SURYH WR EH XQXVDEOH

)RU PRUH LQIRUPDWLRQ DQG WR GLVFXVV KRZ 3DUD'1$ FDQ ZRUN IRU \RXU IRUFH SOHDVH FRQWDFW XV DW paradna@lgcforensics .com paradna@lgcforensics.com

3DUD'1$Â® PDNHV LW TXLFN DQG VLPSOH IRU \RX WR FDUU\ RXW \RXU RZQ RQ WKH VSRW SUHVXPSWLYH '1$ VFUHHQLQJ RXW \RXU RZQ RQ WKH VSRW SUHVXPSWLYH '1$ VFUHHQLQJ Â± WR JLYH WKH EHVW FKDQFH RI JHQHUDWLQJ D '1$ WR JLYH WKH EHVW FKDQFH RI JHQHUDWLQJ D '1$ SURÂ¿OH SURÂ¿OH

6HH 3DUD'1$Â® LQ DFWLRQ DW Forensics Europe Expo, LQ DFWLRQ DW Forensics 24-25 April 2013, Olympia, London.

Â©

/ *& /LPLWHG $ OO ULJKWV UHVHU YHG 25 /*& /LPLWHG $OO ULJKWV UHVHUYHG 25

So wh yw ait? why wait? )DVW IRUZDUG \RXU LQYHVWLJDWLRQ ZLWK 3DUD'1$Â®

RU YLVLW http://paradna.lgcforensics .com http://paradna.lgcforensics.com

FEATURE

xploring the Inves4ga4 ra4onale behind the decision ma and profes ng Oﬃcers can ens king of ure sio conference nal. Carol Jenkins rep the process is more Senior on Inves4ga4 tran ort ve Decisio s on a recent Inves4 sparent The pressure n Making. gator of making

Also in this issue

cri9cal deci major inve sions in s9ga9ons with knowledge uncertain and o)en intol constraints is a scenario erable 9me that is well understoo d by all seni or inves9ga (SIOs). 9ng oﬃcers

8. COMPETITION

Win a Samsung Galaxy MP3

22. MODEL BEHAVIOUR

The research provides a fascina9ng into the deci insig sion making highlighted process and ht a number of facto dis9nguished the best SIOs rs that peers. It foun from their d period of expl that good SIOs went through a ana9on build build narra9ve ing explana9ons in which they behind the that go way evid which is built ence they currently have and on previous cases. It foun experience of other d inves9gators that less experienced tend not to on limited build expe cta9 evid ﬁnd new evid ence – instead they seek ons ence. to

W INTERVIE

Despite this high pressure many deci d environm sions ent and inves9ga are made successfu lly 9ons solve d. Research academics in two univ from ersi9es a:em to get ‘und erneath’ the pts surface and more in-de pth look at take a the the factors aﬀec9ng deci ra9onale and sion making. Professor Thom Cogni9ve Psyc as Ormerod, Professo r of hology at the of Lancaste Universit r spoke at a recent inve y s9gator

conference about rese arch conducte among oﬃc ers d the decision in two forces that exam logs in 60 case ined diﬀerent SIOs s involving 14 .

Issue 1 2013

www.the-in

vestigator.

co.uk

ard Gold stand

- International interviewing

53. HEALTH WARNING

4me irman at a id a new cha g Group has never been higher. Davay’s icide Workin have ed by tod he ACPO Homrds in inves4ga4ons llenges fac cha and nda ses when sta the succes talks about Crompton . e. major crim inves4gators to the fact that

60. THE TECHNOLOGY

www.the-in

vestigator.

2013 Issue 1 -

co.uk

The chan g o f d i g i ta l i n g fa c e fore nsi cs T

TOOLKIT

63. COUNTER

he IT world is con4nually witnessed evolving. In a shi% in the last few overtaken yea PCs, both the device type; mo in number bile devices rs, we have s and usage. hav Lamine Aou e ad reports.

Control

67. FRAUD - Criminal

UDY

TERRORISM - Border

systems. Two major tren ds have risen will con9nue and to decades: mob dominate over the next ility and the been a mob clouds. Ther ile e has with a dram boom in recent year s, along a9c of these devi change of the usag e pa:ern ces; from pred voice to large ominately serving data consump sophis9cated 9on, using gadgets calle highly According to NPD , Andr d smartphones. oid users in for instance the consume an data per mon average 3.3G US B th (cellular Mobile data and WiFi com of traﬃc is also bined). increase 18-fo expected to ld over the approaching next ﬁve year an astonish s, ing month acco rding to Cisco 11 Exabyte per computers systems. Our and mobile devices are knowledge becoming collectors, a good chun data is proc k of our essed and backed-up else, as mos somewhere t of the serv ices we cons ume are

CASE ST

Cloud-based applica9ons have been and deploym surg ents round of clou ing in popularity. The latest d compu9n leading IT g forecasts companies by and market ﬁrms , all show research how rapidly be, adopted cloud is, and in coming will year distributed s. Content than is more inves9ga9ons ever, and forensics will not only isolated piec involve a singl e of hardware e but rather a set of logic , as it used to be, al and phys en99es, usin ical ga changing tech wide range of unce asingly nologies and paper will devices. This brieﬂy desc ribe current the-art, and state-ofchallenges and issues digital fore ahea nsic inves9ga 9ons in com d of ing years. We live in the informa9 on age. User increasingly ’s data is large and loca not only on ted everywh their compute ere, rs or mobile

nent n Compo O p e r a t i o M out of major retailersFraenduded in a www.the-in

vestigator.

co.uk

Issue 12013

£20 Police scam to con Manchester n audacious vic4on by Greater orts. con rep successful it. The Inves4gator t of £20m. on Un been just shor Inves4ga4 of major med were £20M out were scam

Benefits

INTERNA TIONAL

rding firms that s scam to con ic9on by One of the result of reco the An audaciou d in a successful conv ted, and a Celltec Limi £400,000 because of e Fraud retailers ende into chester Polic reports. losses of over ns of this gang, went Greater Man Unit. The Inves9gator made criminal ac9o 40 employees were Inves9ga9on and Hollywood liquida9on plot from a e a t. crim like d e ndan redu It was mor scam by an organise were a ica9ons were gang impl the its movie than t, uary 2013 chester but gang were hell On 21 Febr Manchester Crown Cour gang in Man The e a9c. orat at dram sentenced king the corp every bit as re. dulently hijac ilers by se;ng Crown Squa r reta bent on frau (born name of some majo el Pomeroy iden99es of il addresses using the meant hearings, Dani el This At previous of Oldham (aka Dani up bogus emaloyees of both firms. t of it coun cred 87), in one y to 03/11/19 genuine emp to fraudulently obta s from a man pleaded guilt able McDonagh) defraud and James Chapue, worth of good they were to Aven of pounds conspiracy Sycamore of and millions liers. ts of 90) supp r coun 7/19 majo y to two (born 08/0 number of pleaded guilt them on, for dert Chad arranged to defraud. goods and chester conspiracy They ordered to addresses in Man eroy (born ered were n George Pom worth, to be deliv the goods Kevi re on e, whe Fails uncl frac9 a Drive, Daniel's and Cheshire, never paid for. Only of Stamford piracy to ever 29/11/1965) to two counts of cons dering. collected but fraudulently stolen have y s of money laun pleaded guilt of the good d. one count defraud and been recovere , n to the scam fell vic9m Pomeroy (bor as companies n's wife Julie of Stamford Drive, . As many Kevi £3m nd In total, 13 also s of arou ey 20/08/1973), ded guilty to mon recording lossewere embroiled in the ed plea es sens Failsworth, 80 compani ber of them the but a num laundering. conspiracy and cancelled ld have was amiss l losses wou something rwise the tota orders, othe

Mode l be

www.the-in

vestigator.

co.uk

h a v i ou r

ITION COMPET

2013 Issue 1-

he PEACE fram interviewing ework of inves4ga4ve is some4m the inexperi enced as prod es perceived by some4mes ucing long irrel and there are man evant interviews. How ever, y variables se6ng that in the inter contribute view to this perc Annie Ryan ep4on, from New Zealand Polic reports. e

builds on free recall using techniques advanced to assist a coopera9ve interviewee to informa9on recall as much high qual as possible. ity Quality inve s9ga9ons requ informa9on. ire quality All common purp the models have the ose of gath accurate and ering complete reliable infor , inves9ga9on ma9on to assist an – inves9gator something that ever y must cons tantly striv e for. Interview 4ming When an inter view occurs has a signi in the inve fican s9ga9on the number t impact on the inter view due of variables .

Knowing and understan ding the thre interview mod e els, and unde impact the rstanding 9meline of an inves9ga the interviews, 9on has on is cri9cal. Yet, the interview even more cri9c er’s ques9oni training and ng skills and al is development the those skills meet the stan provided to ensure dard required. Interview models In brief, the three inter view • Free reca At the begi models are: ll (FR): enco nning inve urages coop s9gators do interviewees full picture, era9ve not have a to give their and have li:le what happ own account relevant or ened not. Therefor clue as to what is of without inter in their own 9me and e, it is impe gain as muc ra9ve to rup9ons. h detailed informa9on • Conversa from vic9ms, 9on as possible witnesses the interview management (CM): and suspects inve s9ga9on prog enables er to control . As the resses, and elicit as muc the interview 9me a case certa inly by the h informa9 is presente and on as poss d at court, reluctant inter this informa9 ible from a som viewee. e of on may seem • Enhanced no longer be the irrelevant or may cogni9ve inter in disp g you givin ute. Ther S tor is these earli viewing (ECI) e some of er interview Galaxyefor : The Inves9ga s may 'longwin the Samsung be iseen as , Wi-F ad ofory chance to ', insteMem too beinCard g viewed in 8GB a the inch plus cont 8GB ext er with 4.2

WIN A Samsu 22

y S MP3 ng Galax

player

Issue 1 - led MP3 Play 2013 enab www.the-in ves Display.

tigator.co.

s surfing and Technical Detaily for on the go web of • A vivid displa plays any type viewing MP3 Player mul9media WiFi 4.2 8GB opera9on ck hassle-free • The Galaxy video file with convert any file for playba audio and no need to to easily download • Drop - Play: you for the allows Apps exclusively • Samsung developed that were applica9ons MP3 Player on the large 8GB ence 4.2 viewing experi Galaxy S WiFi an impressive • Delivers screen

w and ema rs shown belo ENT ER HOW TO e famous acto e the thre igator.co.uk Simply nam @the-invest competition

Event preview P27 www.the-investigator.co.uk

il your answ

Picture 3

www.the-in

Exploring the ra4onale behind the decision making of Senior Inves4ga4ng Oﬃcers can ensure the process is more transparent and professional. Carol Jenkins reports on a recent Inves4gator conference on Inves4ga4ve Decision Making. The ACPO Homicide Working Group has a new chairman at a 4me when standards in inves4ga4ons have never been higher. David Crompton talks about the successes and challenges faced by today’s inves4gators.

13. THE CHANGING FACE OF DIGITAL FORENSICS

The IT world is con4nually evolving. In the last few years, we have witnessed a shi% in the device type; mobile devices have overtaken PCs, both in numbers and usage.

19. OPERATION COMPONENT

An audacious scam to con £20M out of major retailers ended in a successful convic4on by Greater Manchester Police Fraud Inves4ga4on Unit. The Inves4gator reports.

ers to:

at rando Picture 2 r will be drawn ’s The winne ble. The editor April 2013. a ve availa e on is 30 Picture 1 for the comp . There is no cash altern entry per person. closing date email s.Only one ons: The no fied by third par e Terms & Condi the winner will be used by any and will not be 1 May 2013 addresses final. Email decision is

2013 Issue 1 -

DIGITAL FORENS ICS

- Fraud

6. EXECUTIVE DECISION MAKING

9. GOLD STANDARD

d by is juxtapose . In the However, this is at an all-9me high t the 9ny public scru papers abou years Government released 23 year when disaster were into stark Hillsborough event It has brought c Senior a)er the tragi ly important it is for teams vital s) and their focus how Oﬃcers (SIO lies in a Inves9ga9ng vic9ms and their fami that with and accept et to engage outs from the is open to posi9ve way and ac9on they take public. sion unt by the every deci held to acco scru9ny and

hard work a decade of or More than of the Seni e the role paying professionalis ) have been . Officer (SIO Inves9ga9ng s are at an all 9me high dard table David off as stan Cons f shire Chie r of the South York took over chai – is fiercely who – recently Crompton king Group Wor icide Hom new por8olio. proud of his too he knows only and SIO himself job As a former go with the lenges that or well the chal in his support for seni of cal is unequivo the frontline working at inves9gators

features

m on

vestigator.

co.uk

Issue 1 - 2013

CONTENTS

Executive decision

OPEN SOURCE

PEN SOURCE

INTELLIGENCE

CONFERENCE

19 March, Rothley Court Hotel, Leicestershire The Investigator is hosting a conference aimed at all investigators working in both the public and private sector on how to make eﬀective use of open source intelligence both in criminal, civil and internal investigations. Our conference will look at the fact that the growth in the internet has led to a wealth of ‘open source’ information now available to investigators in their intelligence gathering. An expert line-up of speakers will provide practical advice and best practice on the speciﬁcs of the open source intelligence that is now available to the investigator, how it can be used, the legal and evidential implications and the implications on existing investigation methods.

Presentation topics include: • Insider information about how to make more effective use of online databases without the need for a consumer credit or data protection licence • Using social networking sites in internal investigations of employees – a case study • Defining and understanding materials derived from Open Source • Developing collection plans and the tasking of staff • Legislation in relation to access Open Source intelligence and using it as evidence • Identifying and managing risk factors

Speakers: • Charles Miller, former senior police officer and Home Office policy advisor on covert policing and open source • Neil Smith, former Avon and Somerset Police officer and now Open Source Intelligence consultant and trainer • Pam Chambers, former Dyfed Powys Police investigator and now an investigator with American Airlines at Heathrow Airport • Peter Farrugia, Head of Counter Fraud, UK insurance arm of BNP Paribas Bank (Cardif Pinnacle Insurance). For further details on this conference visit: http://www.the-investigator.co.uk/conferences.php

Issue 1 - 2013

per delegate

Venue address: Rothley Court Hotel Westﬁeld Lane Rothley Leicestershire LE7 7LG Start time: 9.20am

Finish time: 3.30pm

A certiﬁcate of attendance is available

Iconferences nvestigator th e

Email: info:@the-investigator.co.uk or telephone +44(0)844 660 8707

£135

ESSENTIAL LEARNING FOR TODAY’S INVESTIGATORS

www.the-investigator.co.uk

The one thing that unites inquiries in Stephen Lawrence, Hillsborough et all is public dissatisfaction with the decisions made and the outcome of the case that has left them seriously questioning the competency of the SIO and his or her team.

David Crompton the new chairman of the Homicide Working Group highlights the pressures that SIOs are under not just as a result of public scrutiny but of other factors such as increased use of science, technology and experts. Our report into our recent investigative decision making conference also makes interesting reading about the pressures SIOs face and the rationale behind eﬀective decision making. What stands out in both articles is the need for peer support – both in force and also nationally and the fact that there can be no substitute for experience.

The thing that is critical to both of these factors is on-going support and training as well as the recognition that the best training is done out in the field – in the thick of an investigation. But what also stands out from the University of Lancaster report is that some officers are naturally more skilled and possess the flare to become really exceptional decision makers. In our attempts to standardise practice and provide a national approach to policing – we mustn’t lose sight of the fact that just as some people are naturally good musicians or sportspeople (I am neither) some officers are naturally good SIOs in way that cannot be captured or explained in performance indicators or detection rates and transcends our almost constant obsession with resources, officer numbers and political sound bites.

Carol Jenkins

www.the-investigator.co.uk

Issue 1- 2013

EDITORIAL DIRECTOR Carol Jenkins Tel: +44 (0) 844 660 8707 carol@the-inves9gator.co.uk

COMMERCIAL DIRECTOR Dale Hazell Tel: +44 (0) 844 660 8707 dale@the-inves9gator.co.uk

CONFERENCES Tel: +44 (0) 844 660 8707

conferences@the-inves9gator.co.uk

PRODUCTION Tel: +44 (0) 844 660 8707

snoops@the-inves9gator.co.uk

ACCOUNTS

accounts@the-inves9gator.co.uk

Tel: +44 (0) 844 660 8707 PUBLISHING The Inves9gator 13 Sta9on Road Stoke Mandeville Buckinghamshire HP22 5UL, UK

Tel: +44 (0)844 660 8707 Fax: +44 (0)844 660 8701 info@the-inves9gator.co.uk www.the-inves9gator.co.uk All rights reserved. Contents may not be reproduced in whole or part without the written consent of the publishers. Contact the editor of The Investigator on editor@the-investigator.co.uk for any reproduction enquiries.

FROM THE EDITOR

If you look back on all the major public inquiries into police handling of major investigations over the years – the one thing that unites these unique and often complex cases is the same criticism. The finger almost always points to allegations of flawed or ineffective decision making by the senior investigating officer and decisions made in the early days of an investigation can often come back to haunt the SIO often years after the event. It is all too easy to criticise such decisions with the benefit of hindsight but in acknowledging this it also isn’t an excuse not to critically evaluate such decisions if they have had an adverse impact on an investigation.

FEATURE

Executive decision

xploring the ra4onale behind the decision making of Senior Inves4ga4ng Oﬃcers can ensure the process is more transparent and professional. Carol Jenkins reports on a recent Inves4gator conference on Inves4ga4ve Decision Making.

The pressure of making cri9cal decisions in major inves9ga9ons with uncertain knowledge and o)en intolerable 9me constraints is a scenario that is well understood by all senior inves9ga9ng oﬃcers (SIOs). Despite this high pressured environment many decisions are made successfully and inves9ga9ons solved. Research from academics in two universi9es a:empts to get ‘underneath’ the surface and take a more in-depth look at the ra9onale and the factors aﬀec9ng decision making. Professor Thomas Ormerod, Professor of Cogni9ve Psychology at the University of Lancaster spoke at a recent inves9gator

conference about research conducted among oﬃcers in two forces that examined the decision logs in 60 cases involving 14 diﬀerent SIOs.

The research provides a fascina9ng insight into the decision making process and highlighted a number of factors that dis9nguished the best SIOs from their peers. It found that good SIOs went through a period of explana9on building in which they built narra9ve explana9ons that go way behind the evidence they currently have and which is built on previous experience of other cases. It found that less experienced inves9gators tend not to build expecta9ons on limited evidence – instead they seek to ﬁnd new evidence.

Issue 1 - 2013

www.the-investigator.co.uk

FEATURE

The work also found that skilled inves9gators generated mul9ple hypotheses and tested them in parallel whereas less skilled inves9gators formed a view early on and followed it through. Professor Ormerod told the conference that there is no gold standard for being an Inves9gator and that ‘in some ways that is good because really excep9onal SIOs tend to be like no one else.’ “The people who come in and do really innova9ve work are unlike anyone else.” he explained. Despite the fact there is training for SIOs in policy and procedure Professor Ormerod told delegates that ‘you could argue training discourages this flair and leads to a more rou9ne and standardised approach when actually you want a bit more flair.’ He said that logs have the poten9al to be a important decision support tool and can help externalise ideas during decision making. “When you organise thoughts on a page – you can change the way you think about things.” However, he did highlight the fact this could prove problema9c in that decision logs can serve as a formal eviden9al record in court and the defence might use the informa9on recorded in logs to demonstrate that an SIO was uncertain about decision making. The research also found that there was an increase in the amount of informa9on in a decision log in cases associated with social and behavioural issues and that the richer the decision log – the smoother the transi9on is when a new SIO takes over. Other findings included the fact that logs o)en focussed on ac9ons rather than

www.the-investigator.co.uk

decisions; there was very li:le evidence for cross referencing between mul9ple logs and of the logs examined in the research, many of them lacked consistency with names. Exclusive research conducted by Dan McGrory from the University of Liverpool, a former GMP SIO and na9onal programme manager for PIP also a:empted to gain a deeper understanding into the ra9onale behind decision making. His research was centred around the importance of trust in decision making but his ﬁndings went far beyond this in that they featured candid quotes from a number of SIOs about all aspects of the process. One of the key ﬁndings was that SIOs found their decision making subject to pressure/distrac9on from external sources. The fact that SIOs o)en found themselves having to brief their superiors or local poli9cians had a serious impact on their cogni9ve thinking. The research also highlights the dangers of a ‘people and personality’ driven approach to inves9ga9ons. A full report on the content of both research projects can be found in the next issue of The Inves0gator.

Issue 1- 2013

COMPETITION

WIN A Samsung Galaxy S MP3 player

The Inves9gator is giving you the chance to win the Samsung Galaxy S 8GB plus a 8GB Memory Card, Wi-Fi enabled MP3 Player with 4.2 inch Display.

Technical Details • A vivid display for on the go web surfing and mul9media viewing • The Galaxy WiFi 4.2 8GB MP3 Player plays any type of audio and video file with hassle-free opera9on • Drop - Play: no need to convert any file for playback • Samsung Apps allows you to easily download applica9ons that were developed exclusively for the Galaxy S WiFi 4.2 8GB MP3 Player • Delivers an impressive viewing experience on the large screen

HOW TO ENTER Simply name the three famous actors shown below and email your answers to: competition@the-investigator.co.uk

Picture 1

Picture 2

Picture 3

Terms & Condi ons: The closing date for the compe on is 30 April 2013. The winner will be drawn at random on 1 May 2013 and the winner will be no fied by email. There is no cash alterna ve available. The editor’s decision is final. Email addresses will not be used by any third par es.Only one entry per person.

Issue 1 - 2013

www.the-investigator.co.uk

INTERVIEW

Gold standard

he ACPO Homicide Working Group has a new chairman at a 4me when standards in inves4ga4ons have never been higher. David Crompton talks about the successes and challenges faced by today’s inves4gators.

More than a decade of hard work to professionalise the role of the Senior Inves9ga9ng Officer (SIO) has been paying off as standards are at an all 9me high. South Yorkshire Chief Constable David Crompton – who took over chair of the Homicide Working Group recently – is fiercely proud of his new por8olio. As a former SIO himself he knows only too well the challenges that go with the job and is unequivocal in his support for senior inves9gators working at the frontline of

www.the-investigator.co.uk

major crime.

However, this is juxtaposed by the fact that public scru9ny is at an all-9me high. In the year when Government papers about the Hillsborough disaster were released 23 years a)er the tragic event It has brought into stark focus how vitally important it is for Senior Inves9ga9ng Oﬃcers (SIOs) and their teams to engage with vic9ms and their families in a posi9ve way from the outset and accept that every decision and ac9on they take is open to scru9ny and held to account by the public.

Issue 1 - 2013

INTERVIEW

“It’s a huge example of an event where people don’t feel that they have had jus9ce in any of the inves9ga9ons. It also raises a lot of issues about how vitally important the management of bereaved families is in an inves9ga9on,” said Mr Crompton. Recalling his 9me as an SIO, Mr Crompton recognises the pressures the role a:racts and admits it can be a ‘lonely’ job. Despite this public scru9ny, standards in inves9ga9ons have never been higher thanks largely to the Professionalising Inves9ga9on Process (PIP) that has been introduced to set standards for those working in the area of criminal inves9ga9on. For the ﬁrst 9me, inves9gators can prove they are competence in role by reaching one of the PIP levels. There is no doubt that advances in forensic science and the prolifera9on of ‘experts’ who have the poten9al to contribute to an inves9ga9on has transformed the face of modern day inves9ga9ons. “When I was an SIO we were only really star9ng out with DNA and it took 20 weeks to get a result back – whereas now you can get a result within 24 hours. These advance have given us far be:er opportuni9es than we ever have,’ said Mr Crompton. “However there are also aspects that make life more diﬃcult. There are far greater expecta9ons about what an inves9ga9on should reveal. There is also a great propensity to go back to inves9ga9ons from the past and ques9on the original decision. We operate in a climate where there is much greater scru9ny around what we do.” Mr Crompton acknowledges that these factors bring ‘more intensity’ to the role. “This makes it all the more important to professionalise what we do and so sharing informa9on as a service has never been more important.” As chairman of ACPO Homicide

Chief Constable David Crompton Working Group, Mr Crompton will be encouraging SIOs to support each other na9onally and not s9ck rigidly to force boundaries. Now in its tenth year, the annual SIOs conference, held recently, plays a major part in ensuring the whole na9onal landscape of criminal inves9ga9on is a cohesive one and this year’s conference proved no diﬀerent with inves9gators from around the UK mee9ng in Wyboston to share best prac9ce and experiences. Mr Crompton admits he has taken over as chair at a 9me when the Police Service is at an important crossroads. The Police and Crime Commissioners have just been elected and Chief Constables are s9ll grappling with the a)ermath of the Government announcement that the Police Service must make considerable cost savings. Both developments will have an impact on the whole context in which criminal

Issue 1 - 2013

www.the-investigator.co.uk

Mr Crompton emphasises the importance of establishing and maintaining a healthy dialogue with PCCs to ensure the criminal inves9ga9on side is not overshadowed by vote-winning rhetoric around the visible police presence on our streets and the whole debate around police numbers. He also accepts that criminal inves9ga9ons won’t be immune to the cuts and es9mates there will be fewer inves9gators than there have ever been. The picture is by no means a bleak one though as the crime ﬁgures tell a posi9ve story in that the number of homicides has reduced from 1,072 incidents in 2002/3 to 550 homicides last year. Mr Crompton predicts that homicide preven9on will play a greater role for inves9gators in future in order to ensure further reduc9ons in future.

“What’s important for me is that when you’ve seen such a drama9c drop in homicides – it prompts you to want to take 9me to understand the reason for such a drop. We need to understand exactly what are the things that are driving it down and how can we maximise that.” Looking to the future, Mr Crompton is also keen to understand the capability na9onally to manage inves9ga9ons and acknowledges he has a major role to play as ‘guardian’ around this na9onal capability in rela9on to homicide. This is something he relishes and will be looking forward to the challenges ahead. “I want us to have a consciousness around what does the level of resources look like and where are we na9onally. It’s important that we shape our own des9ny and not end up in a place where we aren’t sure how we got there.”

SUSPECT & WITNESS

www.the-inves0gator.co.uk

TRAINING INTERVIEW C P D - P IP Level 2

The Investigator can arrange interview training for police forces, government agencies and corporate companies. All our trainers are fully qualiﬁed and courses can be run at premises of choice or at our facilities. For further information please contact Dale Hazell on +(0)844 660 8707 or email: dale@the-investigator.co.uk

www.the-investigator.co.uk

Issue 1- 2013

INTERVIEW

inves9ga9ons are run.

THE INVESTIGATOR

Issue 1 - 2013

www.the-investigator.co.uk

DIGITAL FORENSICS

T h e c h a n g i n g fa c e o f dig ital fore nsi cs

he IT world is con4nually evolving. In the last few years, we have witnessed a shi% in the device type; mobile devices have overtaken PCs, both in numbers and usage. Lamine Aouad reports.

Cloud-based applica9ons and deployments have been surging in popularity. The latest round of cloud compu9ng forecasts by leading IT companies and market research ﬁrms, all show how rapidly cloud is, and will be, adopted in coming years. Content is more distributed than ever, and forensics inves9ga9ons will not only involve a single isolated piece of hardware, as it used to be, but rather a set of logical and physical en99es, using a wide range of unceasingly changing technologies and devices. This paper will brieﬂy describe current state-ofthe-art, and challenges and issues ahead of digital forensic inves9ga9ons in coming years. We live in the informa9on age. User’s data is increasingly large and located everywhere, not only on their computers or mobile

www.the-investigator.co.uk

systems. Two major trends have risen and will con9nue to dominate over the next decades: mobility and the clouds. There has been a mobile boom in recent years, along with a drama9c change of the usage pa:ern of these devices; from predominately serving voice to large data consump9on, using highly sophis9cated gadgets called smartphones. According to NPD, Android users in the US for instance consume an average 3.3GB of data per month (cellular and WiFi combined). Mobile data traﬃc is also expected to increase 18-fold over the next ﬁve years, approaching an astonishing 11 Exabyte per month according to Cisco systems. Our computers and mobile devices are becoming knowledge collectors, a good chunk of our data is processed and backed-up somewhere else, as most of the services we consume are

Issue 1- 2013

THE INVESTIGATOR

Conference speakers required

The Investigator conferences is looking for conference speakers for their A utumn schedule in the following areas: • Financial Crime • Covert Policing • Computer Forensics • Investigative Interviewing • CCTV UK police force case studies, best practice and examples in the use of technology in solving crimes are welcomed. For further information please contact Carol Jenkins on 0844 660 8707 or email: carol@the-investigator.co.uk

Issue 1 - 2013

Iconferences nvestigator the

ESSENTIAL LEARNING FOR TODAY’S INVESTIGATORS

www.the-investigator.co.uk

These tremendous technological shi)s in data, services, and resources usage and consump9on, make forensic inves9ga9ons more complicated than ever. Current so)ware tools and forensics experts are already struggling to acquire evidence and to keep up-to-date with the fast-growing pace and constant updates and changes in these services and products. For instance, the iPhone is less than 6 years old, and it is already in its 6th genera9on and Apple has already shipped more than 300 millions devices worldwide. Android, which account for 70 percent share of the global smartphone market (Q4 2012), is constantly evolving and customised by manufacturers, something as basic as the database structure is constantly changing, the ďŹ le systems, the variety of APIs and protocols, etc. In addi9on, Android is compliant with over 300 diďŹ&#x20AC;erent smartphone models (and this is a constantly growing number!). These obviously are not the only players; Microso), Blackberry, Nokia, to name only the big challengers, another wave of emerging manufacturers and so)ware vendors, that include Firefox, Canonical, Tizen, etc. also want a slice of the cake. There is already a huge and urgent need to build knowledge around these technology stacks. On the cloud side, a large number of services, in terms of hos9ng, compu9ng, storage, etc. are provided to an increasing number of companies and developers. From start-ups to mul9na9onals, the adop9on of the cloud is widely spreading. AWS (Amazon Web Services) case studies for instance show the large number of companies already using

www.the-investigator.co.uk

their services. The astonishing expected growth (a $100 billion market in 2016 according to IDC research) makes the cloud a very compe99ve marketplace that moves incredibly fast and therefore lacks any kind of standards. It makes the clouds one of the next big challenges in digital forensics. A large knowledge base about each of the architectures, deployment stacks, delivery models, and the huge range of services and service models, need to be built. The process is par9cularly challenging in this case because of the very nature of the cloud, i.e. combining a range of logical and physical en99es, rather than an isolated physical en9ty as in tradi9onal digital forensics. It is clear, however, that the client side, i.e. the mobile device or the computer itself, would s9ll be a primary source of evidence in the case of an inves9ga9on. But we believe that any server-side data source can s9ll play an important role in any inves9ga9on. While the methods, processes, and procedures are more or less well established in tradi9onal hard drive based computer forensics, the counterparts for mobile and cloud systems are s9ll in their infancy or inexistent altogether. In the rest of this paper, we will discuss general issues of conduc9ng forensic inves9ga9ons on mobile devices, and data and services running on the clouds, based on our experience in dealing with mobile systems and diďŹ&#x20AC;erent cloud architectures and providers. What are the challenges? There are many reasons to this extra complexity in dealing with mobile digital forensics, or conduc9ng forensics inves9ga9ons in a cloud setup. The main

Issue 1- 2013

DIGITAL FORENSICS

delivered over the network.

DIGITAL FORENSICS

shown to produce some data In changes. These devices also a cloud use different file systems specifically designed for context, and flash memory features, such as YAFFS or JFFS, depending on the others. The remote service or the among forensic support for breaches type, it should these specialpurpose file systems be possible to obtain is s9ll limited, and more research is data (actual data or needed on this topic. logs) to recreate Also, there is no simple way for the data accesses and acquisi9on, data recovery, or the moun9ng and the events

ones have already been men9oned, namely the large variety in design, dependent on the manufacturer or the service provider, in hardware and so)ware, their type, func9onality, underlying technologies, etc. These technologies are also con9nually evolving, as exis9ng ones progress and new ones are being introduced, with short product cycles, which obviously make it very diﬃcult for inves9gators to remain up-to-date with current technologies.

It is hugely important for the forensics toolkits developer, as well as the forensics inves9gator, to develop and update their understanding of the way these new systems and components work, the features they possess, in addi9on to the appropriate methods and tasks to perform while dealing with them on a forensic basis. This is currently far from being straigh8orward. Consider the mobile side for instance, hard disks are too large in size, too fragile, and consume too much power to be useful in these systems. These devices use then flash memories, which provide rela9vely fast read access 9mes and be:er kine9c shock resistance than hard disks. Now, when it comes to examining evidence, the basic rule is to keep the data held on the storage medium unchanged. For flash memories, this principle is more challenging than it is in hard disks. Techniques used to work around the erase cycles limita9ons to maximise their life9me, such as wear levelling for instance, might cause unpredictable data changes. Even switching a phone off and on again has

analysis of their memory images for instance. Interested reader can find the descrip9on of interes9ng exis9ng tools, as well as interes9ng research aspects related to mobile digital forensics here . In a cloud context, and depending on the remote service or the breaches type, it should be possible to obtain data (actual data or logs) to recreate accesses and events. The main technical challenge though is how to iden9fy and find the informa9on source, e.g. that par9cular virtual instance that was running or suppor9ng that par9cular service at that par9cular 9me. And 9me is a very important aspect here, if the logging is not properly synchronised between the different sides of the system, it would be difficult to present it as a valid evidence. So next genera9on forensic acquisi9on tools must be able to iden9fy all the physical and logical components amongst various use cases, architectures, and implementa9ons of delivery models. In the cloud, there are three basic delivery models, Infrastructure as a Service (IaaS), Pla8orm as a Service (PaaS), and So)ware as a Service (SaaS). They basically differ in terms of access to the provider-side resources.

Issue 1 - 2013

www.the-investigator.co.uk

PaaS and SaaS, as their names suggest, provide development and deployment pla8orms, and access to ready-to-use applica9ons licenced by the provider. These are more closed type of offerings. An inves9ga9on would be very dependent on the cloud side access and logging features, in addi9on to the services implementa9on and their mapping or deployment, which are obviously very provider-specific and might greatly differ across the board. How to isolate a par9cular process would be a problem in these cases as well. The emerging trend of mul9-cloud deployments makes it even more challenging to trace and analyse applica9ons and data. Many pla8orms, such as VMware’s Cloud Foundry, and many other libraries, such as libcloud or jclouds, support mul9cloud deployments, where a user can easily deploy interoperable applica9ons between cloud providers. Another huge challenge for forensic inves9gators in these setups and

www.the-investigator.co.uk

DIGITAL FORENSICS

IaaS is the delivery of virtualised instances and would be the most open of the delivery models, in terms of access to the provider side. It is the only one where the tradi9onal forensic acquisi9on may apply, via snapshots and machine images for instance. There are, however, s9ll challenges on the way different IaaS offering are presented. Data is not always persistent. In Amazon’s EC2 for instance, a service called EBS (Elas9c Block Store) has to be used to allow data persistency independently from the life9me of an instance. Logs and data might also be fragmented and distributed, which might affect the acquisi9on. Mul9-tenancy aspects and shared resources, and the way the storage space is allocated might also contaminate the imaging and the acquisi9on. In addi9on, even though there is a rela9ve accessibility, low-level analysis is s9ll not possible, as well as access to the hardware.

environments is to obtain evidence using forensically acceptable methods so the evidence can be admi:ed according to the law in the trial. The forensics inves9gator should also be aware that laws might vary across borders (in the case of dealing with the cloud). Evidence admissibility requires a lawful search and the strict adherence to chain of custody rules including evidence collec9on, preserva9on, analysis, and repor9ng. The process of acquiring the data is indeed o)en more scru9nised than the actual evidence recovered for a criminal inves9ga9on. An important part of the preserva9on of evidence is in securing and isola9ng components, but this is easier said than done in these environments. Some of the mobile devices for instance can be remotely wiped (such as the iPhone). Keeping the device connected to the carrier’s network or Wi-Fi can also lead to poten9al updates of the system, incoming signals, messages, etc. which might alter or corrupt the data and poten9ally aﬀect evidence. Data persistency is also a huge problem to tackle in cloud systems. We need standards! Standardisa9on is another big challenge. In the mobile space, there have been a:empts to bring together providers and device

Issue 1- 2013

DIGITAL FORENSICS

manufacturers, such as the WAC organisa9on (Wholesale Applica9ons Community), but it is currently more concerned by crea9ng an open and unified pla8orm and API for applica9on developers. A set of standardised technologies, or guidelines, which would be adopted by manufacturers, will lower the cost and speed up the process of recovering data for inves9ga9ons. It is, however, quite a difficult task to create standards for such a large group of manufacturers who use proprietary circuits, and do not seem to agree on communica9ons. For instance, Apple has already stated they will not join any standards. So, this is not likely to happen any9me soon, and fragmenta9on issues are more likely to worsen. The same applies to the cloud. There are, however, many standardisa9on efforts, at various levels in the delivery of services and from different organisa9ons, including OGF (Open Grid Forum) or OASIS (Organisa9on for the Advancement of Structured Informa9on Standards), among many others. Although most of this is centred on removing fragmenta9on and lowering barriers to adop9on of the clouds, there are s9ll difficul9es in bringing together the major players of the ecosystem to collaborate and define common approaches, processes, or metrics. Everybody is trying to extend and/or consolidate its reach in the market, and very few of them actually worry about defining standards. The on-going showdown ‘Amazon’ vs. everybody else including OpenStack, Microso), Google, etc. shows how this promises to be hard to achieve! Conclusion

Digital forensics needs to play a central role in the evolving IT space, rather than playing catch-up with industry and new technologies being introduced. It is a fact that current so)ware tools, and also forensics experts, are struggling to keep up-to-date with recent technologies and releases, and to provide eﬃcient and durable forensics methods and techniques. The majority of the exis9ng tools are either not fully developed or do not yet provide full func9onality for a large range of systems and devices. The systems we have men9oned in this paper will play an increasingly important role in criminal inves9ga9ons and law disputes, as well as in informa9on security. Data will be increasingly suscep9ble to altera9on, updates, or dele9on. Cloud systems and mobile devices are by nature more prone to incorrect or inappropriate digital forensics processes than separated pieces of hardware. It is becoming essen9al to take the lead in documen9ng best prac9ces and measures to be taken to ensure the reliability and accuracy of next genera9on forensics processes, not only with regard to technical aspects, but also juridical and legal issues.

Lamine Aouad, School of Computer Science & Informa9cs, University College Dublin www.csi.ucd.ie

Issue 1 - 2013

www.the-investigator.co.uk

CASE STUDY

Operation Component n audacious scam to con £20M out of major retailers ended in a successful convic4on by Greater Manchester Police Fraud A Inves4ga4on Unit. The Inves4gator reports. It was more like a plot from a Hollywood movie than a scam by an organised crime gang in Manchester but its implica9ons were every bit as drama9c. The gang were hell bent on fraudulently hijacking the corporate iden99es of some major retailers by se;ng up bogus email addresses using the name of genuine employees of both ﬁrms. This meant they were able to fraudulently obtain credit and millions of pounds worth of goods from a number of major suppliers.

They ordered goods and arranged for them to be delivered to addresses in Manchester and Cheshire, where the goods were collected but never paid for. Only a frac9on of the goods fraudulently stolen have ever been recovered.

In total, 13 companies fell vic9m to the scam, recording losses of around £3m. As many as 80 companies were embroiled in the conspiracy but a number of them sensed something was amiss and cancelled the orders, otherwise the total losses would have been just short of £20m. One of the ﬁrms that were scammed were

www.the-investigator.co.uk

Celltec Limited, and a result of recording losses of over £400,000 because of the criminal ac9ons of this gang, went into liquida9on and 40 employees were made redundant. On 21 February 2013 the gang were sentenced at Manchester Crown Court, Crown Square.

At previous hearings, Daniel Pomeroy (born 03/11/1987), of Oldham (aka Daniel McDonagh) pleaded guilty to one count of conspiracy to defraud and James Chapman (born 08/07/1990) of Sycamore Avenue, Chadderton, pleaded guilty to two counts of conspiracy to defraud.

Daniel's uncle, Kevin George Pomeroy (born 29/11/1965) of Stamford Drive, Failsworth, pleaded guilty to two counts of conspiracy to defraud and one count of money laundering. Kevin's wife Julie Pomeroy (born 20/08/1973), also of Stamford Drive, Failsworth, pleaded guilty to money laundering.

Kevin Pomeroy was sentenced to a total of eight and a half years in prison, Chapman to

Issue 1- 2013

CASE STUDY

He said that the gang went to me9culous lengths to research genuine employees of blue-chip ﬁrms and present a veneer of respectability.

Using extremely plausible scenarios, they fooled a number of companies who had no reason to suspect the orders were anything other than legi9mate.

three years, Daniel Pomeroy to three and a half years which includes an 18-month sentence for a separate fraud oﬀence and Julie Pomeroy to 12 months, suspended for two years, and ordered to undertake 150 hours unpaid work.

Kevin and Julie used the money to fund a lavish lifestyle far beyond their legi9mate means of income, which included a plush home in Failsworth, a rented holiday home in Spain, purchasing jewellery and rare and expensive sports memorabilia, dental veneers, high-powered cars and extravagant amounts of money spent on christening and other events.

Detec9ve Chief Inspector Dave Pester, Senior Inves9ga9ng Oﬃcer, said that one of the biggest problems facing the UK right now is this sort of impersona9on or hijacking of corporate iden99es, which is cos9ng the economy millions of pounds every year.

"This organised crime group successfully obtained £3m worth of goods, and if they had succeeded with every fraud would have pocketed just shy of £20m worth,” he explained.

“That is a staggering amount and if you consider this sort of scam could be happening across the UK, the cost to the economy is eye-watering. Not only that but it feeds the black market which puts genuine retailers out of business as these goods ﬁnd their way into people’s homes.”

"Sadly, some of the companies who were scammed did not do enough research once the fradulent orders were placed and were taken in by the promise of a big pay day thinking they were dealing with such bluechip companies,” he commented.

The OCG's scam began in 2008 and for the ﬁrst two years they impersonated employees of McDonalds, sucking in a number of other unwi;ng organisa9ons such as transport companies and individuals who rented out storage facili9es, as well as the companies they targeted to fraudulently obtain goods. During this two-year period, their typical modus operandi would be to call or email retailers of electronic goods such as Alba, HMV or Daewoo purpor9ng to be from McDonalds.

Assuming the names of genuine employees including senior officials - to present the veneer of respectability they would order bulk quan99es of electronic goods such as plasma TVs, games consoles, washer dryers or laptops, which they claimed would be installed in restaurants across the country. O)en they claimed the goods were needed at charity events or to reward staff for their hard work with bo:les of champagne or whisky. Pomeroy and co would also open credit accounts with these firms, o)en worth six figures.

The goods were delivered to storage facili9es in the Manchester and Cheshire areas, but no

Issue 1 - 2013

www.the-investigator.co.uk

CASE STUDY

payments were ever made. In the case of Celltec, the company had to increase its credit limit to cover the costs of purchasing computers from its own suppliers, which hastened their slide into liquida9on.

Other goods fraudulently obtained in this way included thousands of bo:les of whiskey and champagne and vacuum cleaners.

By 2010, the OCG switched their a:en9on to impersona9ng employees from the bakery Greggs, and used the same scam to fraudulently obtain goods such as more whiskey and coﬀee making machines.

A complex and lengthy inves9ga9on was launched by GMP's Fraud Inves9ga9on Unit to unravel the scam, which included months of painstaking work such as analysis of email documenta9on, forensic and telephony work and witness statements from the defrauded companies to iden9fy those behind the scam.

Finally, on 16 September 2010, Kevin and Daniel Pomeroy were arrested by police following an eight-minute pursuit during which Kevin Pomeroy reached speeds of more than 100mph driving on the hard shoulder of the M60 motorway in order to evade capture. Before the pair were arrested in the Oldham area, the police vehicle tracking them recorded footage of items being thrown from the Pomeroy's car, which were recovered and found to be a mobile phone SIM card, packaging and a handset.

These were analysed and revealed to have been used during the numerous frauds and a:empted frauds.

The homes of the Pomeroy's were searched and police seized a number of documents and a laptop. Forensic analysis discovered a ra) of email documenta9on between the false iden99es assumed by the Pomeroy's and the defrauded companies along with other evidence - incontrover9bly proving the pair were behind the scam.

www.the-investigator.co.uk

Julie Pomeroy was arrested later on the 16 September 2010 at her home address and Chapman a couple of months later following a posi9ve ﬁngerprint iden9ﬁca9on.

Daniel Pomeroy later went on the run to Ireland but was eventually recaptured by police.

Only a very small number of the stolen goods were ever recovered, so it would only be specula9on as to where the goods were sold onto. However, inquiries by Greater Manchester Police established some of the money generated from the sale of the fraudulently obtained goods were put through the accounts held by Kevin's wife Julie. Analysis of her accounts showed that just before the £2,022-a-month mortgage payments were due on their £380,000 home in Stamford Drive, Oldham, large cash deposits were made to cover the payments. £78,000 was deposited in this way.

Vast swathes of money - totalling more than £35,000 - were used to pay oﬀ credit cards and purchase expensive cars, jewellery, private dental and health care, furniture and electrical items. However, HMRC records showed neither earned enough money through legi9mate means to explain this lavish lifestyle or the ac9vity on the bank accounts.

Issue 1- 2013

INTERNATIONAL

M o d e l b e h a v i ou r

he PEACE framework of inves4ga4ve interviewing is some4mes perceived by the inexperienced as producing long and some4mes irrelevant interviews. However, there are many variables in the interview se6ng that contribute to this percep4on, Annie Ryan from New Zealand Police reports.

Knowing and understanding the three interview models, and understanding the impact the 9meline of an inves9ga9on has on interviews, is cri9cal. Yet, even more cri9cal is the interviewer’s ques9oning skills and the training and development provided to ensure those skills meet the standard required. Interview models In brief, the three interview models are: • Free recall (FR): encourages coopera9ve interviewees to give their own account of what happened in their own 9me and without interrup9ons. • Conversa9on management (CM): enables the interviewer to control the interview and elicit as much informa9on as possible from a reluctant interviewee. • Enhanced cogni9ve interviewing (ECI):

builds on free recall using advanced techniques to assist a coopera9ve interviewee to recall as much high quality informa9on as possible. Quality inves9ga9ons require quality informa9on. All the models have the common purpose of gathering complete, accurate and reliable informa9on to assist an inves9ga9on – something that every inves9gator must constantly strive for. Interview 4ming When an interview occurs in the inves9ga9on has a signiﬁcant impact on the interview due the number of variables. At the beginning inves9gators do not have a full picture, and have li:le clue as to what is relevant or not. Therefore, it is impera9ve to gain as much detailed informa9on as possible from vic9ms, witnesses and suspects. As the inves9ga9on progresses, and certainly by the 9me a case is presented at court, some of this informa9on may seem irrelevant or may no longer be in dispute. Therefore some of these earlier interviews may be seen as too 'long', instead of being viewed in the context

Issue 1 - 2013

www.the-investigator.co.uk

Suspects are o)en interviewed more than once during an enquiry. An interview conducted with a suspect a)er a prolonged inves9ga9on is able to focus more on the inves9ga9vely important topics that have been iden9ﬁed. When suspects are interviewed at the start of the inves9ga9on inves9gators need to get as much informa9on as possible. Interviewee impacts Some9mes it is the interviewee that nega9vely impacts the interview. Although asked focussed ques9ons, the interviewee may provide vast detail that is o)en at a tangent. Interviewers trained within the PEACE framework are taught not to interrupt an interviewee as they may lose some relevant detail, and impact nega9vely on the rapport they have gained. Good ques9oning skills and focus can maintain be:er control to an extent. Interviewer’s skill However, the quality of any interview is primarily aﬀected by the skill – or lack thereof – of the interviewer, and in par9cular their ques9oning skills. Appropriate ques9oning skills are essen9al to ensure complete, accurate and reliable informa9on is obtained. Not only the type of ques9ons, but also the 9ming of ques9ons during an interview, impact on the quality and length of an interview. Case Study: A female reports to Police she was raped by her then boyfriend of 6 months while they were staying overnight at a hotel two months ago. She undergoes an interview

www.the-investigator.co.uk

INTERNATIONAL

of the informa9on required at the 9me. Witnesses and vic9ms are primarily spoken to in the early stages of the inves9ga9on; they are providing valuable informa9on that helps to build the factual bases or picture for an inves9ga9on and establishes avenues of enquiry to direct relevant enquiries.

on DVD conducted by a Level 3 Specialist Adult Interviewer. Her boyfriend is also interviewed on DVD, under cau9on for the alleged rape(1). Different interviewers are used for each interview, as differing skills are required. In this case both interviewers began with the opening ques9on of "Tell me about your rela9onship with x". "Tell me about your rela9onship" is an excellent example of an open-ended ques9on. These types of ques9ons are o)en described as ‘TEDS’ ques9ons in police interviewing guidance, i.e. those that start with “Tell me…”; “Explain…”; “Describe…”; “Show me…”. These ques9ons, by their nature, elicit more quality informa9on and minimise the risk of the interviewer influencing what the interviewee has to say(2). (1. Based on an actual case, and interviews with both the vic0m and suspect. 2. New Zealand Police Inves0ga0ve Interviewing Doctrine.) However, asked at the wrong 9me during an interview, this par9cular ques9on can result in long-winded free narra9ves with unfocussed informa9on, and the interview ends up appearing to be more of a counselling session than an informa9on gathering exercise with an eviden9al purpose in mind.

Issue 1- 2013

INTERNATIONAL

context, so it should be canvassed during the interview. However, making it the topic of the ﬁrst ques9on removes the focus of the interview from the ma:er at hand – the rape – to the broader topic of the rela9onship.

Importance of planning Having a plan is cri9cal to the successful outcome of any interview. Planning the opening ques9on, and alterna9ves, are an important part of that plan. An opening ques9on needs to be able to draw out a relevant account from the interviewee. In the L3 Witness Interview of the vic9m in the above case study, the interviewer was trained in Enhanced Cogni9ve Interviewing (ECI). Instead of using a context reinstatement, as is best prac9ce, to ini9ally focus on the one-oﬀ incident of rape (the episodic event), they chose to ask 'Tell me about your rela9onship'. This resulted in approximately one hour of free narra9ve from the interviewee. Minute detail was given at the front end of the interview about the rela9onship covering the en9re six months, while the actual circumstances of the reported rape were only brieﬂy men9oned in the free narra9ve. The actual rape was, however, explored later in the interview.

The ra9onale of some officers may be that star9ng with a seemingly benign ques9on gets the interviewee comfortable, and builds rapport. However, a skilled interviewer will have established rapport before the DVD is turned on and the first ques9on is asked. A ques9on regarding 'rela9onships' is loaded in any situa9on, but par9cularly in a Police interview room, and is relevant to, but not the central issue at hand – the events leading up to and during the alleged rape. In all cases the vic9m and the suspect know what they are being interviewed about. The vic9m because they made the complaint, and the suspect because they are legally required to be informed of the reason at the 9me of arrest or deten9on(3), and at the start of the interview. In this respect, the suspect must be fairly informed and understand the nature and seriousness of the offence, and the jeopardy they are under from the outset. A be:er opening ques9on for the suspect interview would have been "Tell me about the night you and (name) stayed at the (hotel name) on (date)".

A similar response in dura9on and content from the suspect was obtained using the same ques9on. He was aware of the allega9on and he too only brieﬂy men9oned 'what happened at the hotel' in his ini9al free narra9ve.

Keeping the interview focussed Once an account is gained it is up to the interviewer to ensure the interview remains focussed by ques9oning in a relevant manner, and ensuring relevant interviewee topics and appropriate inves9ga9vely important topics are covered to an adequate depth and to the standard required by law.

There is no doubt that the rela9onship between the two is an inves9ga9vely important topic in regards to background and

Another example of open ques9ons are "Describe x to me", "Describe what x was wearing". These gain descrip9ons of a person

Issue 1 - 2013

www.the-investigator.co.uk

What is covered?

Who does it?

Level 1: Foundation

Interviewing victims, witnesses and suspects for volume and priority offences.

Level 2: Advanced

Interviewing victims, witnesses and suspects for serious and complex crime.

Level 3: Specialist Adult Witness

Specialist witness interviewing for major crime - ECI.

Level 3: Specialist

Specialist suspect Limited number of

Where it is conducted?

Accreditation

All operational Interviewing Interviewing employees or victims, witnesses victims, witnesses supervisor and suspects for and suspects for employees who volume and volume and conduct priority offences. priority offences. interviews. Now incorporated into initial (recruit) training. CIB* and select One off. Both Interviewing GDB* who are witness and victims, witnesses accredited in suspect assessed. and suspects for Level 1 Two of each type, volume and as well as priority offences. monitoring. Limited number of select employees.

RNZPC by specialists.

2 interviews within 6 months of completing course, and 2 every year thereafter. 2 interviews every year.

When it started 2008

October 2009

2008

February 2012

Table: New Zealand Police Inves0ga0ve Interviewing competency framework

(3) Sec0on 23(1)(a) New Zealand Bill of Rights Act 1990. (4) Holds posi0on of Strategic Advisor: Inves0ga0ve Interviewing; NZ Police Na0onal Headquarters. (5) Currently on leave without pay from NZ Police, working as a Research Fellow with the ARC Centre of Excellence in Policing and Security at Griﬃth University, Queensland, Australia. Held Posi0on of Na0onal Advisor: Standards and Training: Inves0ga0ve Interviewing, at rank of Senior Sergeant.

for iden9ﬁca9on purposes. Person descrip9ons are very per9nent when the oﬀender is unknown to a vic9m. However, when, like in this case, the suspect and vic9m are well known to each other, iden9ty is not an issue and gaining a full physical descrip9on of the suspect during the interview is generally redundant.

interview, we do need to look at, and understand, the contribu9ng factors to an eﬀec9ve interview in the context of the inves9ga9on at hand. Some factors cannot be changed. However, if the skills of the interviewer are at issue, this can be addressed by training, workplace learning, assessment and mentoring.

Not only is it an unnecessary cogni9ve load that may 9re the vic9m, but the 9me taken in interview and subsequent transcribing, court 9me etc impacts on overall resources – and adds to the percep9on of the PEACE framework producing 'long and irrelevant' interviews.

The New Zealand approach Since 2007 New Zealand has adopted an Inves9ga9ve Interviewing competency framework based on the English and Welsh PEACE model (Schollum, 2006, 2007). The Na9onal Policing Improvement Agency (NPIA) in the United Kingdom authorised and allowed NZ Police to use their PEACE-related material as required.

Training and professional development in gaining eﬀec4ve interviews So to truly understand the ﬁnal product of an

www.the-investigator.co.uk

By building rela9onships with overseas

Issue 1- 2013

INTERNATIONAL

Level

INTERNATIONAL

subject ma:er experts such as Gary Shaw, Steve Cro), Dr Becky Milne, Professor Ray Bull, Detec9ve Superintendent Andy Griffith and those in New Zealand such as Dr Rachel Zajac, Dr Deirdre Brown, Professor Ian Lambie and Dr Ma:hew Gerrie we have taken this vast exper9se and developed our own training and professional development programme. Detec9ve Inspector Ross Grantham(4) and Dr Nina Westera(5) developed the NZ Police programme and ensured that during this process we mentored officers so that we could have our own in-house exper9se and become more self-sufficient in training delivery. The programme supports staff to con9nuously improve their interviewing skills. It also provides be:er service to vic9ms and witnesses, ensuring suspects are interviewed in an appropriate manner, as well as

supplying improved informa9on to decision makers in inves9ga9ons. In turn New Zealand Police subject ma:er experts have been part of the team that has assisted Queensland Police with their interviewing programme development and training, and are being approached for assistance/training by other agencies within Australasia. Accredita9on is an integral part of the New Zealand programme, where competencies are demonstrated against na9onal standards through a workplace assessment process. Simula9on is not accepted. Transfer of knowledge and skills to the workplace in interviewing is important to the success of the training, and without accredita9on / workplace assessment this cannot be assessed.

T h e I n v e s t i g a t o r m a g a zi ne i s a v a i l a b l e o n w o r l d w i de p o l i c e fo r c e i n t r a n e t s

F REE OF C HA RGE

To get The Investigator on y o ur i n t r a n et c ont a ct : Te l : + 4 4 ( 0 ) 8 4 4 6 6 0 8 7 0 7 info@the-investigator.co.uk

Issue 1 - 2013

Investigator the

December/January 2011

www.the-investigator.co.uk

Double Jeopardy

ESSENTIAL READING FOR TODAY’S INVESTIGATORS

C old case murde r m a ke s h i s t o r y

Also inside this issue

• Cold Case Reviews • Mobile Phone Forensics • 2012 Olympics • • Operation Eaglewood • Intelligence Data • CPS Update •

www.the-investigator.co.uk

FORENSICS EUROPE EXPO

The Premier International Forensics Event for Police, Military, Intelligence Agencies, Lawyers, Corporate Forensic Analysts, Laboratories, Government Bodies and Agencies together with leading suppliers, services, equipment and practitioners from across the world. Conferences – Workshops – Training – Networking – Exhibition

Co-located with

Sponsored by

In Collaboration with

Organised in Partnership with

Event preview

Conferences – Workshops – Training – Networking – Exhibition

Co-located with

Sponsored by

www.forensicseuropeexpo.com

In Collaboration with

Organised in Partnership with

FORENSICS EUROPE EXPO

Fo r e n s i c s E u r o p e E x p o : a f o c a l p o i nt f o r t h e i n d u st r y

he ﬁrst ever Forensics Europe Expo takes When the government took the decision to place at London’s Olympia on 24-25 April close the service last year, the model for the 2013. Event director Phillip Hunter talks to industry changed for good. It’s now an open TheThe Premier International Forensics Event for Police, Intelligence Agencies, Inves4gator about the thinking behind and Military, free market, and the challenge is toLawyers, Corporate Forensic Analysts, Laboratories, Government Bodies and Agencies together with the show. ensure that the facili9es used by people like leading suppliers, services, equipment andthe practitioners from across police and the legal sectorthe areworld. accredited What prompted the launch –ofWorkshops Forensics – Training and–up to standard.– Exhibition Conferences Networking Europe Expo? FOR ENTRY TODAY The landscape for the REGISTER forensics industry has FREE Forensics is the second highest expense for changed considerably in recent 9mes. Up police forces a)er manpower, and in an www.ForensicsEuropeExpo.com /theinvestigator un9l March 2012, the vast majority of environment where they are facing austerity forensic tes9ng in the UK was done by the measures, budget cutbacks and now, with government’s Forensic Science Service. this new, open market, being able to assess Co-located with

Sponsored by

In Collaboration with

Organised in Partnership with

www.forensicseuropeexpo.com

Not only do they need to be able to look at the different types of cost-effec9ve services they can use, and what they’re ge;ng for those services and how much they cost, they are also looking at ways they can maximise efficiencies in the collec9on of evidence itself, in terms of both costs and 9me, without being of detriment to their inves9ga9ons. There’s also a need for a place where the labs themselves can come and look at new equipment to upgrade their facili9es – where they can share best prac9ce through hearing about successful case studies and taking part in an educa9on programme that looks at minimising costs, doing be:er business and examining the science that underpins it all. So the point of the exhibi9on and the conference is to link the en9re industry, from labs and lab equipment, through to forensic services, equipment and educators – to provide a focal point where everyone in the industry can meet, discuss the most important issues and the latest innova9ons, and plot out a course for the next 12 months and beyond. Who are you hoping will a:end the event? There are a range of core audience groups who should a:end the event. The police is an obvious visitor group because they use forensic services everyday as part of their job. They’re closely followed by the law sector – both defence lawyers and the Crown Prosecu9on service need to have the facility to challenge evidence, in order to ensure the criminal jus9ce system is served properly. The military and intelligence sectors are also key audiences, as are government and nongovernment agencies such as border

www.forensicseuropeexpo.com

agencies, the NHS, the FSA, the IPCC, HMIC, accident inves9ga9on bureaus, trading standards, and environment and benefit agencies, which all use forensic services at 9mes. Of course it’s important to bring in the forensics labs themselves, as well as the university laboratories, and all those involved with educa9on around forensics. The other important group that we are targe9ng is corporate users of digital forensics. These are the people who are responsible for internal inves9ga9ons into data misuse or intellectual property the), from sectors such as banking, pharmaceu9cals, technology, or cri9cal na9onal infrastructure; they’re all very interested in reducing that kind of risk. Why should people a5end Forensics Europe Expo – and why should companies exhibit? An important aspect in this evolved forensics market is sourcing the right suppliers – making sure they meet the right standards and have the right accredita9on. That’s vital – it’s about making sure you can do your job properly, making sure the criminal jus9ce is balanced and effec9ve, and also means you’re comparing and contras9ng prices and managing your budget. So it’s a chance for suppliers to meet the people who use their products and services as part of their day to day roles, and an opportunity for visitors to find out more about the latest innova9ons and technologies – such as rapid DNA tes9ng, for example. For our interna9onal visitors, there’s a lot of interest in what is happening within the UK. The Forensic Science Service model was seen as something to emulate, and now that’s changed. They want to know what the repercussions will be, what the new model will look like, and how we’re moving towards that. Why are you running two conference

FORENSICS EUROPE EXPO

what’s available and up to standard is impera9ve.

FORENSICS EUROPE EXPO

Investigator the

www.the-investigator.co.uk

PUBLIC RELATIONS POLICING - DEFENCE - SECURITY

Specialists in public relations for policing, security and defence.

The Investigator PR PR - Media Training - Journalism - Design

13 Station Road, Stoke Mandeville, Bucks, HP22 5UL, UK

Tel: +44 (0)844 660 8707

E: carol@the-investigator.co.uk

THE NEW UFED TOUCH FASTER, SMARTER, EASIER MOBILE FORENSICS r 6Q UP Y GBTUFS SFTVMUT r 6OSJWBMFE EFWJDF TVQQPSU r 5PVDI TDSFFO BOE JOUVJUJWF (6* r "MM JODMVTJWF Ă FME SFBEZ LJU r /FX QFSJQIFSBMT BOE BDDFTTPSJFT

Physical, logical, file system and password extraction from legacy and feature phones, smartphones, portable GPS devices, handheld tablets and phones manufactured with Chinese chipsets. Exclusive physical extraction, advanced decoding and analysis from BlackBerryÂŽ, Android, iOS devices and more.

sales@cellebrite.com www.ufedseries.com

www.forensicseuropeexpo.com

There are a lot of organisa9ons out there who provide excellent, specialised forensics conferences with very specific and focused content. But we wanted to be broader than that, with the aim of providing an annual event which brings everyone across the industry together. The conference programme gives an overview of the full breadth of what forensic science actually means to the job of someone like a police scene of crime officer or an evidence collec9on team. The conference is relevant not just to one par9cular specialty, but to each of them. Delegates whose interest has been piqued by one of the conference sessions can then go on to the exhibi9on floor and talk to some of the people there about those special9es. The broad conference scope is also a benefit in terms of networking. We’re bringing the en9re industry together, so the opportunity to meet and talk with those outside of your regular area of exper9se is much higher. The overall aim of the event is to promote the sharing of best prac9ce – and to provide a place where that can happen. Forensics Europe Expo will be held 24 – 25 April 2013 at Olympia, London, UK. Entrance to the exhibi9on is free by pre-registering in advance at www.forensicseuropeexpo.com and the conference is a paid to a:end programme.

www.forensicseuropeexpo.com

Forensics Europe Expo will also be co-located with Counter Terror Expo, the interna9onally acclaimed event for counter terrorism and security solu9ons. Companies interested in exhibi9ng should contact Zoe Bonser, Senior Sales Manager on T: +44 (0) 207 384 7778 E: zoe.bonser@clarionevents.com

EVENT DETAILS Dates: 24 - 25 April 2013

Venue: London Olympia, The Grand Hall, Olympia Way, Hammersmith, London W14 8UX Exhibition opening times: 24 Apr 2013 - 09:30 - 17:00 25 Apr 2013 - 09:30 - 17:00 Travel: BY TRAIN Kensington Olympia (Mainline trains) Silverlink and South Central Trains run direct services to both these stations from Clapham Junction, Gatwick Airport, Brighton, Watford Junction, Milton Keynes, Northampton and Rugby. BY TUBE Kensington Olympia (District Line) BY BUS Olympia is served by the following bus routes: Hammersmith Road 9, 10, 27, 28 Holland Road 49 North End Road 391 Details on the conference, FREE vistor registration for the exhibition and workshops, accomodation and travel can be found at: www.forensicseuropeexpo.com

FORENSICS EUROPE EXPO

streams – and what can delegates gain from a5ending? The two conference streams are Forensics Innova9on – focused on biological forensics – and Digital Forensics. The decision to go that way was based on our analysis of industry trends and the speaker submissions that we received, and those two broad areas stood out as a simple and straigh8orward means of presen9ng their content.

Forensics Europe Expo 24 - 25 A pril 2013 FORENSICS EUROPE EXPO

Forensics Europe Expo Preview

orensics Europe Expo is the focal point for the entire forensics industry by filling the void for cost-effective products, revolutionary solutions and expert advice left in the wake of the Forensics Science Service closure. The exhibi9on floor brings together leading forensic suppliers for the first 9me in the UK to showcase ground-breaking techniques and technologies, including Gradko Forensic displaying their fast and reliable rou9ne drug analysis services, Neogen presen9ng ELISA a unique drug tes9ng kit which can screen over 300 drugs and/or metabolites, MP Biomedicals who provide life science and diagnos9c products in the field of Molecular Biology, Cell Biology, Rapid Diagnos9cs and Immunology, Salient who will be launching their new genera9on dips9cks on the show floor and in the Workshop Programme and Hamilton Robo9cs a world leader in robo9c worksta9on innova9on for unique, custom laboratory automa9on solu9ons. Forensics Europe Expo 24-25 April 2013, Olympia, London, is sponsored by LGC Forensics, in collabora9on with The Forensic Science Society and organised in partnership with The Inves9gator, is the only forum to bring together Police/ Law Enforcement, Legal Sector, Public Sector, Government, Coroners Offices, MOD/ Armed Forces, Scien9sts, Laboratories and the Corporate/ Private Sector to source the latest forensic products and innova9ons.

commi:ed. The conference will be a celebra9on of these advancements, examining them in detail and deba9ng present and future challenges that will occur as a result. Visi4ng the exhibi4on Register for your FREE visitor pass today for the only opportunity to view the latest cu;ng edge technology, cost-effec9ve equipment and innova9ve services and connect with the en9re forensics industry brought together for the first 9me in the UK. Workshops A:end the FREE to a:end Workshop Programme to gain knowledge about the new innova9ons, case studies and the latest forensic products to improve your technical exper9se, project efficiencies and core inves9ga9ve and prosecu9on skills. Case studies include the forensic applica9on of DNA tes9ng by DNA Worldwide, Sample lysis and DNA isola9on in single tube extrac9on by Biotype and the use of CCTV in apprehending suspects by LGC Forensics.

Conference: Forensic Innova4on – past, present and future Innova9on in forensic science is a true The Premier International Forensics Event for Police, Military, Intelligence Agencies, Lawyers, phenomenon that has been embraced by law Corporate Forensic Analysts, Laboratories, Government Bodies and Agencies together with enforcers, academics and industry professionals leading suppliers, services, equipment and practitioners from across the world. across the world in a way that could not have Workshops – Training – Networking – Exhibition been predicted even a Conferences decade ago. –Such advancements have transformed the eviden9al REGISTER FOR FREE ENTRY TODAY poten9al that is now available to inves9gators /theinvestigator that has enabled themwww.ForensicsEuropeExpo.com to secure successful prosecu9ons – o)en years a)er a crime has been www.forensicseuropeexpo.com Co-located with

Sponsored by

In Collaboration with

Organised in Partnership with

www.forensicseuropeexpo.com

ElcomSo% Provides Forensic Access to Encrypted BitLocker, PGP and TrueCrypt Containers ElcomSo) Co.Ltd. announces the release of Elcomso) Forensic Disk Decryptor, a forensic tool providing access to informa9onstored in disks and volumes encrypted with BitLocker, PGP and TrueCrypt. Suppor9ng several acquisi9on modes, Elcomso) Forensic Disk Decryptor offers complete access to encrypted informa9on in real 9me. Recognizing desktop and portable crypto containers and offering zero-footprint opera9on, the new tool becomes an invaluable tool for inves9gators, IT security and forensic specialists. “Our customers asked us for a tool like this for a long, long 9me”, says Vladimir Katalov, ElcomSo) CEO. “We’re finally releasing a product that’s able to access encrypted volumes produced by all three popular crypto containers.” “Before Elcomso) Forensic Disk Decryptor, only Elcomso) Distributed Password Recovery could handle encrypted disks”, says Yuri Konenkov, ElcomSo) leading crypto analy9c. “It used brute force to break passwords. Today, we’re introducing a special tool that uses a completely different approach to decryp9ng disks protected with PGP, True Crypt, BitLocker and BitLocker To Go. We have also added the ability to brute-force passwords for TrueCrypt and BitLocker To Go containers to Elcomso) Distributed Password Recovery.” ElcomSo) also adds True Crypt and BitLocker To Go plugins to Elcomso) Distributed Password Recovery, enabling the product to a:ack plain-text passwords protec9ng the encrypted containers with a range of advanced a:acks including dic9onary, mask and permuta9on a:acks in addi9on to brute-force. www.elcomso%.com. Stand: 1-E49 TopAir Systems Announces a High Quality Fingerprint Development Chamber TopAir Systems, a leading global laboratory equipment and clean air solu9ons supplier, has announced a new high quality Fingerprint Development Chamber enabling easy, fast and excep9onally clear fingerprint iden9fica9on. TopAir's Cyanoacrylate Fuming Chamber is used to develop latent prints from non-porous surfaces in a safe, controlled environment. The chamber's recirculatory design enables the system to operate and setup with no duc9ng required. The Cyanoacrylate vapors are filtered by a carbon filter, ensuring that no dangerous substances are exhausted into the atmosphere surrounding the

www.forensicseuropeexpo.com

The volume and importance of digital informa9on in criminal inves9ga9ons is on the rise. Detec9ves who are intrinsically involved in collec9ng and assessing evidence must depend on specialists, unfamiliar with their cases, to process digital informa9on. This impedes and even prevents prosecu9ng cases since there are too few digital forensics specialists and labs to support caseloads. Fox-IT’s Tracks Inspector brings simplicity, scalability and collabora9on to the handling, storage, processing, management and repor9ng of digital evidence. With its web-based interface it can be deployed across mul9ple loca9ons and accessed from anywhere to support inves9ga9ve teams, even in the earliest stages of a case. For more informa9on please visit www.tracksinspector.com. Stand: 1-F35 laboratory. Its ductless construc9on allows the unit to be easily moved and transported. The chamber is available in three sizes, from small benchtop units to larger walk-in chambers, and can also be customized according to customer requests. It offers an easy-to-use control panel, displaying all parameters of the processing cycle. Adjustments to the presets can be quickly performed. The system can be ac9vated automa9cally, or manually with an op9on for temperature and humidity control. The system features a filtering system with a carbon filter, as well as eco-friendly, cost-saving LED ligh9ng. "We are excited to offer forensic labs this advanced equipment, which will make their job much easier and safer," said Eran Edny, CEO, TopAir Systems. "The safety, portability and high quality of this product offers op9mal produc9on of fingerprints, making it invaluable to police sta9ons and other ins9tu9ons in the forensic area." www.topairsystems.com

Europe Expo 24 - 25 A pril 2013 FORENSICS EUROPEForensics EXPO

Forensics Europe Expo Product Information

CASE TUDY

Forensics Europe Expo 24 - 25 A pril 2013

Forensics Europe Expo Product Information

Forensics Europe Expo free to a5end two day Workshop Programme The Forensics Europe Expo free two day Workshop Programme is pu;ng last year’s key forensic products under the spotlight by sharing their latest successes, challenges and lessons learnt with you to improve your technical exper9se, projects eﬃciencies and core inves9ga9ve skills.

In addi9on, Forensics Europe Expo is hos9ng exclusive product launches in the following fields: Scene of Crime Equipment, New Technologies, Police Equipment, Lab Equipment, Tes9ng Equipment and Digital Equipment - a:endance is crucial for anyone seeking to invest in the very latest cu;ng edge technologies and equipment. Expert speakers sharing their insight include: NEW PRODUCT LAUNCH: New Genera9on Dips9cks for Extremely Rapid Quan9ta9ve Detec9on of Trace Levels of Explosive. • An EU – funded consor9a focussed at developing a hand-held device for rapid real-9me quan9ta9ve analysis of TNT, PETN and RDX explosives at trace level • Lab prototypes developed and scale up manufacture underway for lab and field tes9ng • Poten9al applica9ons for product presented Dr Kenny Lang, Business Development Associate, Saliant INTERNATIONAL CASE STUDY: Sample Lysis and DNA Isola9on in Single Tube Extrac9on Processes for Accurate Forensic Profiling. • Understand how you can work off all backlogs of rape kits fast, accurately and comfortably • No compromise on quality and quan9ty of genomic DNA extracted from any sample and without jeopardising your DNA evidence • We help you to ensure the success of your downstream analysis and the overall quality of the final result in gene9c typing to fight against crime Dr Helge Schnerr, Biochemist, Biotype FROM COLLECTION TO CONVICTION – STARLIMS Comprehensive Forensic Solu9on • Crime Scene Module – Collec9on including STARLiMS mobile Crime Scene App • Forensic Laboratory - Processing and Repor9ng • Property – Long Term Storage / Disposi9on Camie Dove - Project Manager-Forensics, Starlims EXCLUSIVE CASE STUDY: Forensic applica9on of DNA tes9ng: From human skin scales to animal DNA

• Skin scales from adhesive tapes as DNA source • Case examples - Extrac9on methods to avoid DNA mixtures • Animal DNA in forensic case work - Species iden9ﬁca9on by mtDNA sequencing and STR proﬁling Dr Burkhard Rolf, Laboratory Director, DNA Worldwide Group

NEW PRODUCT LAUNCH: Enhancing fingerprints on thermal paper, an alterna9ve to chemical treatment • Heat treatment of fingerprints on thermal paper and why it works. • Comparison of heat treatment with chemical development for aged fingerprints • Comparison of heat treatment with chemical development for a deple9on series Dr John W. Bond OBE, Senior Lecturer in Forensic Sciences, Consolite EXCLUSIVE CASE STUDY AND PRODUCT LAUNCH: Forensic Intelligence • Gain an exclusive introduc9on to forensics within intelligence led models • Understand how forensic intelligence is applied to crime and evidence types • Hear and learn from prac9cal case studies and so)ware demonstra9ons Robert Milne, Forensic Prac00oner and Consultant, CSI EquipmentL EXCLUSIVE CASE STUDY: Targe9ng Drug Use at Fes9vals • Fes9vals have tradi9onally been ‘hot-spots’ for drug-dealing and drug use • The pressure is on fes9val organisers to demonstrate a robust an9-drug policy • One solu9on is to have on-site drug tes9ng facili9es so that anyone caught can be immediately ejected from the fes9val or arrested. This creates an effec9ve deterrent to prevent drug use on site. Dr Vanessa Kellie, Forensics Manager, Gradko Labs INDUSTRY ANALYSIS: The Use of CCTV Today • Understand the limita9ons of CCTV • Hear an analysis of it's uses & capabili9es • Listen to several case studies where CCTV was used to apprehend suspects and solve cases Clive Burche5, Forensic Imaging Analyst, LGC Forensics Imagery/Audio EXCLUSIVE CASE STUDY: Interest of hair tests in toxicological inves9ga9ons • Long term abuse of drugs of abuse • DFSA cases • Others applica9ons doping prac9ces, etc

www.forensicseuropeexpo.com

Forensics Europe Expo Product Information

For sampling and sample prepara4on we have introduced our new product line: Sampletype.

The products are guaranteed free of DNA. DNA free means: DNA of any kind, that might be present, is – by means of treatment with ethylene oxide – degraded to such small fragments that no human proﬁle can be generated with PCR ampliﬁca9on methods

DNA isola9on, both manual and automated

• Stepwise lysis and separa9on in the same device without extra pipe;ng steps • Closed system that minimizes the risk of cross-contamina9ons and mix-ups • No manual transfer of the substrate • Quan9ta9ve recovery of lysate • Improved process ﬂow • No pellet recovery • Reduced risk of contamina9on • Compa9ble to any consecu9ve

Sampletype i-sep® SQ • proprietary sealed ﬁlter material which allows the release (Lysis) and separa9on of DNA in one system • Lysis condi9ons up to 95°C • DNA extrac9on procedures involving lysis of forensic samples such as swabs or clinical samples to extract DNA from 9ssue

Vincent Cirimele, Laboratory Director, DNA Worldwide Group NEW PRODUCT LAUNCH: Nucleaic Acid Decontamina9on • Nucleic acid decontamina9on of surfaces and equipment • Non-hazardous and non-corrosive • For reliable results in DNA analysis Dr. Thomas Rückrich PhD, Applichem EXCLUSIVE CASE STUDY: Covert Drug Opera9ons • It is notoriously difficult to gain access to drug dealers the higher up the chain you get • Infiltra9ng the drug dealers world allows law enforcement agencies to target the drugs at source • Test Purchase Opera9ons provide a cost-effec9ve solu9on for gaining intelligence and removing large seizures of drugs from the community Dr Vanessa Kellie, Forensics Manager, Gradko Labs EXCLUSIVE CASE STUDY: Animal DNA in forensic case work • Species iden9fica9on by mtDNA sequencing • STR profiling to iden9fy individual animals • Case examples Dr Burkhard Rolf, Laboratory Director, DNA Worldwide Group

www.forensicseuropeexpo.com

Sampletype i-sep® DL • proprietary self-sealing ﬁlter material which allows the stepwise release and separa9on of DNA •DNA extrac9on procedures involving diﬀeren9al lysis of e.g. forensic samples such as epithelium vs. sperms

www.sampletype.com Stand: Pavillion

NEW PRODUCT LAUNCH: Forensic Touch, a glove that does more than protect • The current situa9on - Contamina9on problems, the costs and issues. • How the glove works - Fingerprints, detec9on rates, be:er scene reading & DNA. • First phase test results from Portsmouth University Tony Coombes, CSI manager, Derbyshire Constabulary and Dr Paul Smith MSc PhD, Senior Lecturer in Forensic Studies, Portsmouth University EXCLUSIVE CASE STUDY: ParaDNA – Fast Forward your Inves9ga9on • ParaDNA has been designed as a triage system for Police Forensic Submission Units • In 75 minutes you can determine whether your crime stain contains suﬃcient human DNA to generate a useful proﬁle when submi:ed to the Forensic Service Provider; it also provides the gender of the individual. • ParaDNA serves as a presump9ve test for DNA, thus helping police to priori9se their submissions Peter Johnson, Global Product Manager, LGC

Forensics Europe Expo 24 - 25 A pril 2013

Sampletype i-sep® spin columns, incuba9on and separa9on in the same device, allow sample lysis directly in the column and consecu9vely the lysis buﬀers are quan9ta9vely transferred with no extra handling steps.

Manufacturing and produc9on of our Sampletype products according to the “New standards for the produc9on process of comsumables and reagents for the forensic DNA-analysis and evidence collec9on“ of the German Federal Criminal Police oﬃce. Produc9on and treatment with ethylene oxide are accredited.

CASE TUDY

Forensics Europe Expo 24 - 25 A pril 2013

Forensics Europe Expo Product Information Op4cal and Electron Microscopy for Forensics – only available from Carl Zeiss Ltd

Light and electron microscopes are widely used for the analysis of very small specimens and the conclusive determina9on of the origin of many materials that are crucial to the chain of evidence. The scanning electron microscope (SEM) resolves features as small as a nanometer for determina9on of shape and size. Under variable pressure (VP) condi9ons EVO MA is used for the and analysis of small fragments of non-conduc9ve material on human so) 9ssue. In conjunc9on with energy dispersive X-ray spectroscopy (EDS), the system can determine the elemental composi9on of the samples. Used in combina9on op9cal light microscopes such as AxioZoom.A1, and a compound microscope such as the Axio Scope.A1, allows for a wide range of forensic examina9on and analysis. e.g. Failure Analysis and Fractography, Paint Analysis, Gunshot Residue, Forensic Toxicology are all possible.

www.zeiss.co.uk customercare@zeiss.co.uk Stand: 1-C23

HORIBA Scien4fic LAUNCHES 2 NEW FORENSIC LIGHT SOURCES New Mini-CrimeScope Advance and FOCUS LED Offer Improved Intensity and Power for Be:er Evidence Detec9on February 26th, 2013, London, UK – HORIBA Scien9fic have just announced the launch of two new addi9ons to their range of FORENSIC Light sources. The Mini-

CrimeScope® Advance (MCS-ADV) and FOCUS LED. Exploi9ng new bulb technology, and new high throughput, high durability interference filters, the Mini-CrimeScope® Advance is now the brightest, most efficient bulb-based forensic light source on the market today. The FOCUS LED is the first LED Alternate Light Source that offers uniform illumina9on, thereby elimina9ng hot spots. The FOCUS’ superior op9cal design offers an homogeneous spot and defined edge to provide the consistent intensity necessary to properly capture photos where there are no under/over developed sec9ons in the same image. Incorpora9ng the latest in scien9fic innova9on with new, cu;ng edge bulb technology u9lizing a proprietary combina9on of gases, the MiniFOCUS LED CrimeScope® Advance produces more light, intensity and power, allowing inves9gators to see even the faintest of evidence. The MCS-ADV features a newly redesigned and patented filter wheel at the working end of the liquid light guide. Users can easily switch a high throughput filter with only a ‘flick of a thumb,’ on the hand that is direc9ng the light guide. No other light source offers this feature. Finally, the new Mini-CrimeScope® ADV is the lightest weight forensic light source in its class. This combina9on of features and func9onality provides a Mini-CrimeScope® Advance portability that allows inves9gators to easily bring laboratory intensity into the field. The FOCUS LED is the first LED Alternate Light Source that offers uniform illumina9on, thereby elimina9ng hot spots. The FOCUS’ superior op9cal design offers an homogeneous spot and defined edge to provide the consistent intensity necessary to properly capture photos where there are no under/over developed sec9ons in the same image. The FOCUS LED is a lightweight, compact and ruggedized unit that allows

www.forensicseuropeexpo.com

Forensics Europe Expo Product Information

inves9gators to search crime scenes with the same uniform illumina9on as that of larger, lab-based light source units with maximum beam projec9on. The ba:ery-powered LED generates a minimum of two hours run 9me, and oﬀers push bu:on "instant" on for immediate processing of crime scenes.

For addi9onal informa9on please go to: h:p://www.horiba.com/uk/scien9fic/products/forens ics or call +44 (0)1204 82048142 - Stand: 1-G42 Nuix 4.2 upgrade delivers an essen4al toolset for large-scale digital inves4ga4ons Nuix, a worldwide provider of informa9on management technologies, has announced the release of version 4.2 of its inves9ga9on so)ware. New digital forensics capabili9es in this release round out Nuix’s inves9ga9ve feature set, making it an essen9al tool for any government or private-sector organisa9on needing to complete large-scale inves9ga9ons efficiently and effec9vely. “For large corpora9ons and regulatory or law enforcement agencies, Nuix now stands alone as the most powerful data forensics and inves9ga9on so)ware on the market,” said Dr James Kent, head of Nuix’s inves9ga9on business. Adding to Nuix’s intui4ve inves4ga4on interface and powerful data processing abili4es on a minimal hardware footprint, the new version now includes: • Indexing and viewing the Microso) Windows Registry • Carving out full and par9al deleted files and slack space • Drilling into forensic images and examining forensic ar9facts with a hex viewer • Loading Cellebrite and Micro Systema9on XRY

www.forensicseuropeexpo.com

mobile device images to analyse communica9on pa:erns • Conduc9ng deeper analysis of Mac OS HFS+ and HFSX ﬁle systems. “Organisa9ons with heavy inves9ga9ve workloads now have one applica9on from which they can conduct all their analy9cal tasks, from prying open the smallest forensic details to correla9ng evidence across many sources and virtually unlimited volumes of data,” said Kent. Nuix customers most commonly use the so%ware to inves4gate: • Fraud • Privacy (PII ) and credit card (PCI ) data stored without adequate security • Inappropriate images • Drug or people traﬃcking • Network compromise or breach • Counterterrorism and intelligence • Intellectual property the) following a data loss preven9on alert • Foreign Corrupt Prac9ces Act breaches or improper payments • Forgery of documents • Human resources and employment issues. Recent new customers include the United States Department of Health and Human Services (HHS), the European Union Directorate General for Compe99on and the United States Transporta9on Security Administra9on. www.nuix.com

Forensics Europe Expo 24 - 25 A pril 2013

The FOCUS LED is uniquely designed. Its hexagonal hilt prevents it from rolling away, and clearly displays the wavelength. It also comes with an a:ached lanyard to avoid being dropped accidentally. It’s palmsized and is easily transported, along with its full line of accessories, in its rigid, weather-proof case. MCS-ADV and FOCUS LED can easily detect biological fluids, trace evidence, treated fingerprints, gunshot residue, drugs, bite marks and footprints. It can also be used to find hair, fingernails, bones and teeth. The MCS-ADV standard kit includes: 10mm ac9ve diameter Liquid Light Guide (6 feet long) with dual armour plate, 4 pairs of goggles (1 UV protec9on, 1 yellow, 1 orange, 1 red), and 15 different wavelengths in 1 remote interchangeable thumbwheel (patented) with built in collimator.

Forensics Europe Expo 24 - 25 A pril 2013

Forensics Europe Expo Exhibitor List 3DHISTECH Stand: 1-D22 3DHISTECH is a leading company in whole slide imaging, which has been developing hardware and so)ware products for more than fi)een years. Our solu9ons, including mul9ple award-winning brigh8ield and fluorescent digital slide scanners and digital TMA machinery and applica9on, cover the whole pathology workflow. www.3dhistech.com

ABSCIEX Stand: 1-C40 AB SCIEX helps to improve the world we live in by enabling scien9sts and laboratory analysts to push the limits in their ﬁeld and address the complex analy9cal challenges they face.

The company's global leadership and world-class service & support in the mass spectrometry industry have made it a trusted partner to thousands of the scien9sts and lab analysts worldwide who are focused on basic research, drug discovery & development, food & environmental tes9ng, forensics and clinical research.

With over 20 years of proven innova9on, AB SCIEX excels by listening to and understanding the everevolving needs of its customers to develop reliable, sensi9ve and intui9ve solu9ons that con9nue to redeﬁne what is achievable in rou9ne and complex analysis. www.absciex.com

Agilent Technologies Stand: 1-A00 Agilent Technologies leads the industry with robust instruments that provide the ability to confirm and quan9fy thousands of substances. Our workflow solu9ons enable you to maintain stringent prac9ces, from sample prepara9on to analysis, that stand up to scru9ny. When combined with our informa9cs architecture, you can manage large quan99es of data while preserving the integrity and security of your results. www.agilent.com Alec Jeffreys Forensic Science Ins4tue

Stand: 1-G30 The Alec Jeﬀreys Forensic Science Ins9tute is a mul9disciplinary research and teaching centre. The goal of the Ins9tute is to bridge the gap between academic research and forensic prac9ce by suppor9ng forensic research and teaching across the University and making research and innova9on available to key stakeholders within the Criminal Jus9ce System. www.le.ac.uk/forensic-science

Ampac Corpora4on Stand: 1-F40 Ampac Corpora9on is a leading global manufacturer of packaging materials for the Security and Retail markets. Our products protect, present and preserve our customers’ products in industrial, commercial and consumer markets. Ampac is the largest manufacturer of Security and Retail products in the world supplying from USA, UK and Vietnam. It

Biotype Diagnos9c GmbH provides innova9ve diagnos9c solu9ons to the market and is constantly working on developing their exis9ng product por8olio as well as researching new technologies to meet the demands of forensics and medical professionals throughout the world. Our Mentype® test kits guarantee highest quality standards for clinical research and diagnos9cs. Biotype’s Sampletype i-sep® system drama9cally streamlines the oﬀ-line lysis por9on of the extrac9on method.

Lysis Buﬀer is added directly into the Sampletype i-sep® column along with the sample for incuba9on. Simple and fast separa9on of lysate from substrate with this unique single tube assembly is achieved by centrifuga9on. The collec9on tube is then loaded directly on the robo9c pla8orm for further DNA-puriﬁca9on. This eliminates the manual lysate and substrate transfer steps, saving 9me, minimizing cross-contamina9on and sample transposi9on.

Gradual buffer separa9on drama9cally ra9onalizes the process of differen9al lysis which allows analysing mixed samples of sexual assault evidence in one hour. This is in sharp contrast to a typically labor-intensive, 9me-consuming process of several hours. The Sampletype i-sep® ONEprep protocols enable in addi9on comple9on of off-line lysis in about 20 minutes for biological fluids and 9ssues and allow direct amplifica9on of the resul9ng DNA-lysate without further purifica9on. Biotype Diagnos4c GmbH Moritzburger Weg 67 D-01109 Dresden Germany info@biotype.de Tel.: +49 351/8838 400 www.sampletype.com www.biotype.de

See us in the Pavillion www.forensicseuropeexpo.com

Forensics Europe Expo Exhibitor List

employs over 1,000 people with global sales for 2012 of $350 million. From our plant in Melbourn, UK we supply customers across the Europe, Middle East and Africa region. www.ampaconline.com

AppliChem GmbH Stand: 1-E43 AppliChem GmbH (Darmstadt, Germany) was founded in 1992 and belongs to the ITW group since 2012. The company produces Chemicals and BioChemicals for chemical, biological, pharmaceu9cal and medical research and produc9on and markets them worldwide. The main product lines are:

Chemica This product line includes chemicals and reagents such as standard volumetric solu9ons, acids and bases, ready-to-use- buﬀer solu9ons, dye solu9ons and many more. A major part of the Chemica products are manufactured in our labs.

Custom Synthesis and other Services We oﬀer single-step and mul9-step synthesis, building blocks for combinatorial chemistry or even synthesis elabora9on from concept to start-up. www.applichem.com

Arro SupraNano PLC Stand: 1-G5 ARRO SupraNano plc is dedicated to the research, development and manufacture of nanotechnology derived par9cles and services for forensics and counter terrorism. U9lising the latest technological advances, which were generated by Fred Rowell, Professor of Analy9cal Chemistry at The University of Sunderland, has led to the development of a range of stable silica nanopar9cles which have been engineered at the nanoscale to produce a targeted set of proper9es suitable for a wide range of applica9ons. This has involved not only incorpora9ng a variety of dyes and other par9cles into the core par9cles, but also controlling the surface proper9es of the par9cles.

The ini9al sets of products are materials for latent fingerprint analysis for the enhanced iden9fica9on of suspects. Future products under development include materials that enable enhanced informa9on to be gathered from fingerprints to aid suspect elimina9on. www.arrosupranano.com

Biotype Diagnos4c GmBh Pavillion Biotype Diagnos9c provides innova9ve solu9ons to the market to meet the demands of forensics and medical professionals throughout the world. One

www.forensicseuropeexpo.com

BM Polyco Stand: 1-C33 Founded in 1979, BM Polyco is the UK’s market leader in designing, developing and supplying high quality hand protec9on to the industrial, consumer and medical sectors and is now one of Europe’s leading glove companies. BM Polyco’s underlying success is based on the simple principal of con9nuous improvement including innova9on, quality and service. www.polyco.co.uk

BVDA Interna4onal Stand: 1-F40 BVDA Interna9onal focuses on the development and produc9on of products for use in forensic departments of the police, forensic ins9tutes, government inves9ga9on agencies, forensic service providers and educa9onal ins9tu9ons. BVDA produces a wide range of products. Some examples are readymade reagents and dyes for the visualiza9on of (latent) marks, fingerprint powders and silicone materials for cas9ng tool marks and li)ing of powdered fingerprints. The fastest growing product areas are the GELLIFTERS, which are used for the li)ing of latent marks, and the GLScan imaging system, a system that ensures the ul9mate result when imaging marks on Gelli)ers. BVDA was founded in 1934 and has since been established in the Netherlands. The products are exported to a long list of countries across the globe through a network of local distributors and agents. In two countries within the EU sales offices are established, in Sweden and in Germany. The U.S. and Canadian markets are served from a sales office in Massachuse:s, USA. www.bvda.com/EN

Carl Zeiss Stand: 1-C23 Op4cal and Electron Microscopy for Forensics – only available from Carl Zeiss Ltd Light and electron microscopes are widely used for the analysis of very small specimens and the conclusive determina9on of the origin of many materials that are crucial to the chain of evidence. Visit Stand C23 talk to the experts. www.zeiss.co.uk customercare@zeiss.co.uk Cellebrite Stand: 1-B25 Founded in 1999, Cellebrite is known for its technological breakthroughs in mobile forensics. Its Universal Forensic Extrac9on Device (UFED) is used interna9onally by law enforcement, military, intelligence, corporate security, and eDiscovery agencies to extract data from legacy and feature phones, smartphones, portable GPS, tablets and

Forensics Europe Expo 24 - 25 A pril 2013

BioChemica AppliChem oﬀers a wide range of biochemicals for biochemistry, cell biology, microbiology and molecular biology. A further focus at AppliChem is the development and produc9on of decontamina9on reagents such as our trademark DNA-ExitusPlus™.

product, the Sampletype i sep® system drama9cally streamlines the off-line lysis por9on of the DNA-extrac9on method. ONEprep enables furthermore high quality direct PCR amplifica9on without DNA purifica9on. www.sampletype.com

Forensics Europe Expo 24 - 25 A pril 2013

Forensics Europe Expo Exhibitor List

phones manufactured with Chinese chipsets. www.cellebrite.com

Centre of Excellence for Life Sciences Ltd Stand: 1-A40 SALIANT is an EU funded consor9um of companies, academic partners and government forensic laboratories commissioned to develop a hand-held device for real-9me analysis of trace levels of explosives. Based on proprietary an9body technology the device is reliable, simple to use, and capable of producing extremely rapid results. It is ideally suited to deployment by Forensic Laboratory services and First Responders at crime scenes and terrorist incidents.

Consolite Forensics Ltd Stand: 1-G10 Consolite Forensics is an innova9ve company developing new technologies in forensic science. Consolite Forensics has brought to market two revolu9onary new products, transforming their respec9ve fields: CERA is a new technology that develops fingerprints on fired cartridge cases. HPS is a new development to automa9cally and consistently develop fingerprints on thermal paper such as 9ll receipts. www.consolite.co.uk

Cranfield University Pavillion The Forensic MSc Programme is run by the Cranfield Forensic Ins9tute with its state-of-the-art facili9es and based at Cranfield University’s Shrivenham campus. Our courses are state-of-the-art too developed by our dedicated research scien9sts, guided by Industry Advisory Panels, constantly monitored to ensure their leading-edge and realworld relevance and delivered by world class academics and industry experts. Employers value the 'real-life' relevance our courses offer - as a result 93% of our graduates enter relevant employment or further study within six months of gradua9on. www.cranfield.ac.uk

CRC Press Stand: 1-D43 CRC Press is a publisher of scien9ﬁc work, publishing informa9on in a variety of accessible formats. With a bestselling backlist of forensic science books, and new ones publishing each year, we are your exclusive source for the latest research. Visit our booth and receive our limited-9me conference discount. www.crcpress.com

CSI Equipment Stand: 1-C37 Established in 1982, the original company was formed to supply cyanoacrylate (superglue) to the Police Service. This is now used extensively for the development of ﬁngerprints on non-porous surfaces. We have since grown to the extent that we have a product range containing well over 1000 items. We are constantly researching new and updated methods

of forensic detec9on. In recent years we have introduced 'Magneta Flake' probably the only ﬁngerprint powder made purely for the recovery of latent ﬁngerprints and now fast becoming the powder of preference with many Law Enforcement Agencies.

The 'Pathfinder', a wireless electrosta9c dust li)ing device, the size of a small transistor radio has revolu9onised the recovery of shoemarks from most surfaces. We are now able to supply forensic kits specially manufactured for individual customer requirements. For the past few years we have been working in conjunc9on with several Law Enforcement Agencies in the UK to develop PathfinderXpress. PathfinderXpress has been designed to help manage footwear marks found at crime scenes. It uses the NPIA (Na9onal Police Improvement Agency) NFRC (Na9onal Footwear Reference Collec9on) as its database. This is probably the finest system available to Law Enforcement Agencies today and at a price far less than any compe9tor can offer. Any department, however small, can now afford this technology. www.csiequipment.com

Cybergene4cs Stand: 1-A45 Cybergene9cs TrueAllele® computer technology accurately analyzes challenging DNA evidence. Available as in-house product or outsourced service, TrueAllele provides objec9ve DNA match sta9s9cs. TrueAllele resolves DNA mixtures having two to six contributors, handles degraded and touch DNA, and oﬀers kinship analysis. TrueAllele includes a probabilis9c genotype database for informa9ve DNA inves9ga9on. www.cybgen.com

DNA Worldwide Stand: 1-A20 DNA Worldwide provide Europe's most advanced, DNA, Toxicology and Forensic Tes9ng. Over twice the accuracy of other labs, fully accredited to European forensic standards and compe99vely priced. From complex DNA reconstruc9on, unknown substance tes9ng to Europe's leading expert witness team. www.dna-worldwide.com

DuPont Stand: 1-F40 For over 40 years, DuPont, manufacturer of protec9ve materials Tyvek®, Tychem®, Kevlar® and Nomex®, has worked with emergency services the world over to help provide protec9ve clothing solu9ons for a diverse range of applica9ons. Whether it be handling hazardous chemicals or preserving evidence at a scene of a crime, personnel working in poten9ally dangerous situa9ons, personnel rely on the innova9ve protec9ve solu9ons from DuPont to keep them safe at work. U9lising years of research and development and a strong understanding of emergency responders’ requirements, technical experts at DuPont have designed several varia9ons of

www.forensicseuropeexpo.com

Forensics Europe Expo Exhibitor List

the coverall made of Tyvek® to address diﬀerent needs. The range includes the highly an9cipated Tyvek® Classic Xpert coverall, a new genera9on in protec9on in the Type 5/6 category that holds out 99.2% of dust and three 9mes more liquid than its predecessor. It is lightweight and durable and it also incorporates innova9ve design features that ensure an excep9onal level of wearer and process protec9on when working. www.personalprotec9on.dupont.co.uk

Expert Witness Stand: 1-D32 As a small, totally independent publisher, not restrained by parent companies or any associa9ons, we have a dynamic edge on the compe99on, allowing us to act in the interests of the Experts and their users.

We have one simple objec9ve, namely: To provide open and easy access for the Legal and Media professions to Experts in all of the disciplines for which they may need expert advice or guidance.

We do: constantly look to improve our services to Experts and those who use them. We do not: recline on our posteriors or rest on our laurels.

Our policy is to react posi9vely to the needs both of those who use our Directories and the Experts themselves. So, we con9nuously canvass our users for their comments and sugges9ons. That this has been a successful policy is shown by the growth in the size and distribu9on ﬁgures of our publica9ons over the years since we produced our ﬁrst Directory.

We distribute this to solicitors, barristers’ chambers, Law Courts, police forces, insurance companies and the media. So popular did it become, that we published annual edi9ons therea)er, enlarging our scope and service, so that separate Sco;sh and Irish edi9ons were soon added, together with a Website edi9on, our Expert Referral SearchLine, and, this year, our new Directory of Ancillaries and a sister company in Australia to do the same thing in South East Asia. Our combined Northern Hemisphere Directories this year will contain details of more than 3000 Experts spread over more than 3400 disciplines and will be distributed to over 105,000 recipients, including, for the ﬁrst 9me, major police forces and reference

www.forensicseuropeexpo.com

Faro Technologies UK Ltd Stand: 1-G44 FARO is the world’s most trusted source for 3D measurement technology. The company develops and markets computer-aided measurement and imaging devices and so)ware. Technology from FARO permits high-precision 3D measurement, imaging and comparison of parts and compound structures within produc9on and quality assurance processes. The devices are used for inspec9ng components and assemblies, produc9on planning, documen9ng large volume spaces or structures in 3D, surveying and construc9on, as well as for inves9ga9on and reconstruc9on of accident sites or crime scenes. www.europe.faro.com Flir Systems www.ﬂir.com

Stand: 1-D10

Forensic and Policing Services Associa4on (FAPSA) Stand: 1-C45 FAPSA is speciﬁcally tailored for small and medium enterprises (SMEs) but welcomes enterprises of all sizes, from manufacturers, suppliers and service providers as well as academic ins9tu9ons and interested end users. www.fapsa.org.uk

Fornesic Pathways Stand: 1-G15/G20 Forensic Pathways, an interna9onal company, specializes in innova9ve so)ware solu9ons for mobile phone analysis, as well as image and video analysis to the criminal/defence intelligence markets. In addi9on to so)ware solu9ons we are also innovators of the transparent forensic stepping plate, used globally to prevent cross-contamina9on at crime scenes. Collabora9ng with end users in the development of product ensures that our products are designed not only for users, but by users. www.forensic-pathways.com

Fox-IT Stand: 1-F35 Fox-IT prevents, solves and mi9gates the most serious threats as a result of cyber-a:acks, fraud and data breaches with innova9ve solu9ons for government, defense, law enforcement, cri9cal infrastructure, banking, and commercial enterprise clients worldwide. Our approach combines human intelligence and technology into innova9ve solu9ons that ensure a more secure society. We develop custom and packaged solu9ons that maintain the security of sensi9ve government systems, protect industrial control networks, defend online banking

Forensics Europe Expo 24 - 25 A pril 2013

ElcomSo% Co.Ltd. Stand: 1-E49 ElcomSo) Co.Ltd. is a global industry-acknowledged expert in computer and mobile forensics providing tools, training, and consul9ng services to law enforcement, forensics, ﬁnancial and intelligence agencies. ElcomSo) is Microso) Gold Independent So)ware Vendor, Intel So)ware Premier Elite Partner, member of Russian Cryptology Associa9on (RCA) and Computer Security Ins9tute. www.elcomso).com

libraries. Increasingly the electronic media is being used by the legal profession as the number one resource for loca9ng Expert Witnesses and we are proud that our website, www.expertwitness.co.uk is ﬁrmly established as the number one in the UK. This is accompanied by our award winning CD-ROM and our SearchLine that searches our database containing all the UK's Expert Witnesses.

Forensics Europe Expo 24 - 25 A pril 2013

Forensics Europe Expo Exhibitor List

systems, and secure highly conﬁden9al data and networks. www.fox-it.com

Fumecare Ltd Stand: 1-F40 Fumecare, based in Formby, Merseyside is operated by Carol and John Haugh, whose work in the ﬁeld of Forensic, Medical and Pharmaceu9cal laboratory containment systems began in the early 1990s when John became a director of Semper Products. More recently, he worked as an independent design consultant, handling sales and new product development projects for interna9onal fume cupboard manufacturers. www.fumecare.com

Fumecare Limited design, supply, install and maintain a full range of UK-made products. Since its launch, Fumecare has produced ﬁltra9on fume cupboards and downﬂow benches for European healthcare facili9es, bespoke worksta9ons for a large engineering client in Hong Kong and forensic cabinets for law enforcement organisa9ons in the United Kingdom and USA. Fumecare specialises in Forensic recirculatory systems such as Cyanoacrylate Fuming Chambers, Evidence Drying Cabinets and Fingerprint Work Sta9ons that do not require the construc9on of ducts or the use of air handling and extrac9on systems. As a result, its products can be installed very quickly with minimal disrup9on to working rou9nes, and can even be set up as mobile units where required. Moreover, because they are not required to

move large volumes of air, they tend to be much more energy eﬃcient than ducted systems and can yield a corresponding saving in opera9ng costs. www.fumecare.com

Stand: 1-C27 GE Healthcare www3.gehealthcare.com/en/Global_Gateway

Global Forensics Ltd Stand: 1-E42 Global Forensics Ltd markets specialist and innova9ve forensic products and services worldwide. The company is headed by Mike Holden and he leads a team with many decades of experience in the forensics area. We are here to provide great customer service and technical exper9se on all our products and services and to give advice to exis9ng and prospec9ve customers. We are constantly on the lookout for innova9ve products and services that would beneﬁt police forces, forensic scien9sts and emergency service organisa9ons. www.globalforensics.co.uk Gradko Forensics Pavillion A cornerstone of the associa9on is the promo9on and development of interna9onal standards for quality assurance and accredita9on. It will encourage and assist members engage in collabora9ve research and development alliances with other members and universi9es. With a monitoring and commentary service, it will provide a common SME ‘voice’ on

Phenom-World oﬀers a wide range of desktop-based electron microscopes and accessories. The Phenom-World products are intui9ve to use, fast to create results and built to high quality standards. From the entry level pure series through to the high-end pro series, all Phenom electron microscopes share ease of use, unmatched 9me to results, and worry-free system ownership.

The Phenom desktop SEM is a true walk-up tool for many forensic experts who inves9gate their own samples in first line. Forensic applica9ons of SEM are found mostly in areas where there is a need for good imaging at high magnifica9ons in combina9on with elemental analysis. This is the case in areas where small par9cles of rela9vely heterogenic character and with a complex composi9on play a major part, for The Phenom desktop SEM example gunshot residue, and pyrotechnical postexplosion residues. These analysis can be accomplished with the Phenom proX desktop SEM – a powerful all-in-one electron microscope with fully integrated EDS technology. The Elemental Iden9fica9on so)ware available for the Phenom proX allows researchers to program mul9ple point analysis and iden9fy any hidden elements within any sample. Visit Phenom-World at the Forensics Europe Expo at stand A30 and experience the possibili9es of the Phenom proX desktop SEM. Visit Phenom-World, Dillenburgstraat 9E, 5652 AM Eindhoven, The Netherlands E: info@phenom-world.com Tel: +31 (0)40 259 73 60 www.phenom-world.com

See us at Forensics Europe Expo on Stand 1-A30

www.forensicseuropeexpo.com

Forensics Europe Expo Exhibitor List IntaForensic Stand: 1-G25 IntaForensics is a leading UK provider of Digital Forensic Services to the legal sector, police forces, local authori9es and commercial organisa9ons interna9onally. Whether it’s Computer or Mobile Phone Forensics, support with a Cell Site Inves9ga9on, or providing Expert Witness in court; IntaForensics have a highly regarded reputa9on for delivering thorough, detailed and accurate Analysis and Reports. You’ll also ﬁnd IntaForensics suppor9ng corporate organisa9ons with Training, Security Assessments and Forensic Readiness Reports, as well as being home to Lima – the complete end-to-end Forensic Case Management System in use by Interna9onal Law Enforcement, Forensic Service Providers, Government Departments, and Commercial Organisa9ons. www.intaforensics.com

Hamilton Robo4cs Ltd Stand: 1-D47 Hamilton Robo9cs designs and manufactures fully automated robo9c systems. The products range from unique, custom laboratory automa9on solu9ons (turnkey solu9ons) on standard applica9ons validated through partnership programs with renowned biotechnology companies as well as OEM solu9ons to the top ten diagnos9c companies. www.hamiltonrobo9cs.com

Established for 40 years, JEOL (UK) Ltd is part of a world wide network of JEOL companies, with their head oﬃce in Akishima, Tokyo. www.jeoluk.com

Guidance So%ware Stand: 1-A05 Guidance So)ware is the global leader in digital inves9ga9on solu9ons, with EnCase® Forensic and Tableau digital forensic hardware long-9me industry standards among law enforcement. Many government agencies and Fortune 100 companies use EnCase® Enterprise, while EnCase® eDiscovery and EnCase® Cybersecurity are market-leading solu9ons for e-discovery and incident response. Visit www.guidanceso)ware.com

Horiba UK Ltd Stand: 1-G42 HORIBA Scien9fic offers the widest range of instruments for Forensic Scien9sts from Raman and XRF to “Best in Class” Forensic Light Sources and AFIS systems. Our two new products FOCUS LED and Mini CrimeScope Advance are the results of our programme of con9nuous development, improvement and innova9ve research and make evidence detec9on quicker and easier. www.horiba.com HWL Scien4fic Instruments Stand: 1-E25 HWL Scien9fic Instruments is supplying high sophis9cated ac9ve an9vibra9on systems for research and industry. Our systems ensure a totally vibra9on free basis for opera9ng highest resolu9on measurement instrumenta9on like: AFM, Electron Microscopy( SEM + TEM ), Interferometry, Surface Metrology, Microbalances, No support media, like compressed air. www.hwlscien9fic.com

www.forensicseuropeexpo.com

Joel UK Stand: 1-D36 From our office in Welwyn Garden City, Her8ordshire, JEOL (UK) Ltd offer sales, support and applica9ons training for a wide variety of scanning electron microscopes (SEM), scanning probe microscopes, transmission electron microscopes (TEM), NMR spectrometers, ESR spectrometers, mass spectrometers, amino acid analysers and semiconductor process equipment. As one of the worlds leading suppliers of scien9fic equipment, we are proud to offer our customers the highest level of sales and technical support maximising their investment in JEOL products

Lab Mate Interna4onal Stand: 1-00 Interna9onal Labmate Ltd has channeled over 38 years of publishing experience into producing four market leading scien9fic journals for the interna9onal laboratory market: ‘Interna9onal Labmate’, ‘Labmate UK & Ireland’, ‘Lab Asia’ and ‘Chromatography Today’. Each publica9on acts as a key informa9ve purchasing tool for buyers involved in the scien9fic field and a crucial marke9ng pla8orm for manufacturers and suppliers to promote their products. The company also publishes news for separate markets, including; ‘Interna9onal Environmental Technology’, ‘Asian Environmental Technology’, ‘Petro Industry News’, and ‘Measurement Analysis China’.

Covering diﬀerent geographical regions, the journals provide all the latest product, industry and business news coupled in-depth technical ar9cles which aim to problem solve and address key issues at the forefront of the industry. The suppor9ng websites www.labmate-online.com, www.envirotechonline.com and www.petro-online.com, allow users to search eﬃciently for product informa9on, obtain

Forensics Europe Expo 24 - 25 A pril 2013

forensic and policing issues. Member led special interest groups will provide a pla8orm to express opinions. Gradko Forensics offers a fast and reliable rou9ne drug analysis service providing iden9fica9on, weight and purity for all commonly encountered drugs of abuse. Addi9onal services include iden9fica9on of cu;ng agents and adulterants as well as drug traces examina9ons. Our team of experienced Forensic Prac99oners provide a comprehensive customer service with full chain of custody. Analy9cal results, including legal classifica9on, are presented in Report or Eviden9al Statement format . Our trained Expert Witnesses are able to present evidence in court. We also offer bespoke services such as test purchase opera9ons, fes9val drug tes9ng and sales of detector dog training aids. www.gradko.com/forensics/

Forensics Europe Expo 24 - 25 A pril 2013

Forensics Europe Expo Exhibitor List technical ar9cles and respond directly to suppliers.

LabWare Stand: 1-B25 Choosing a laboratory informa9cs solu9on has longterm implica9ons and is an important decision for any organiza9on. LabWare’s products have been proven in a wide range of industries over a period of more than 20 years. Our sole focus is laboratory informa9cs and we develop market and support a single well planned suite of products. At the forefront of our Enterprise Laboratory Pla8orm (ELP) are our ﬂagship products, LabWare LIMS and LabWare ELN. LabWare has never pursued an acquisi9on-based growth strategy, and so our solu9ons have evolved according to a deliberate roadmap. LabWare is a privately owned, stable, and ﬁnancially strong company with an extensive and global product delivery and support infrastructure. Our global team includes the most experienced laboratory informa9cs professionals in the world.

The worldwide headquarters for LabWare is in Wilmington, Delaware, U.S.A., and all research and development ac9vi9es take place at this loca9on. LabWare has invested in establishing sales and support facili9es around the world to provide the best possible support to our customers in over 90 countries. LabWare employees have an average of 10+ years of industry experience and many with 15+ years. The total base of experience across our company exceeds 2200 man years. We bring together the talents of chemists and biologists with those of engineers and so)ware experts to develop products focused keenly on the needs of laboratory users. Whereas other suppliers struggle to keep up with the burdens imposed by mul9ple overlapping and redundant applica9ons, LabWare provides solu9ons for all types of laboratories in an easily conﬁgured common pla8orm. www.labware.com

LGC Forensics Stand: 1-C10 LGC oﬀers a comprehensive range of forensic science services, based on an extensive range of techniques. Our scien9sts use the latest innova9ons - o)en developed in-house - to recover evidence and establish the facts of cases under inves9ga9on. LGC Forensics delivers established and me9culously executed forensic science either at the crime scene or in one of our eight UK laboratories and will bring expert scien9sts to showcase their skills and case studies. From DNA to Digital to Ecology inves9ga9ons, our industry leading professionals will be demonstra9ng their skills to provide an informa9ve and engaging display at the inaugural Forensic Expo UK. www.lgc.co.uk MD5 Stand: 1-C34 Established in 2003, MD5 is now regarded as one of the leading computer forensics and mobile phone forensics companies in the UK. Our extensive client

list includes large mul9-na9onal businesses, government and law enforcement agencies, solicitors and accountants. Our fully trained forensic inves9gators have extensive knowledge and experience in computer forensic and mobile phone forensic inves9ga9ons and have extensive experience in presen9ng evidence in an understandable format in a court of law.

MD5 are commi:ed to the con9nual training of our inves9gators and inves9ng in research and development of new hardware/so)ware that will enable us to maintain our all round advantage in defea9ng cybercrime. MD5 is widely renowned for producing important forensic so)ware such as Virtual Forensic Compu9ng (VFC) and teXtract. VFC is a valubale tool for computer inves9gators to virtually view a suspects computer as it appears to the suspect (i.e. you can load the computer and desktop as you would the original drive). teXtract is our most recent product that recovers deleted text messages from mobile phone memory dumps. Our research has also developed so)ware tools that can significantly reduce the search 9me in inves9ga9ons. As an ISO 9001, ISO 27001, ISO 17025 and Investors in People registered company, we are confident we have the skills and resources to provide our clients with a professional and thorough inves9ga9on. As registered Expert Witnesses our clients are provided with sufficient peace of mind that MD5 will undertake their requirements in a professional manner whilst providing them with access to the country's leading forensic inves9gators.

Over the last decade there has been unparalled growth in Computers and Mobile Phones use at home and at work. Computers and Mobile Phones can hold more informa9on and secrets that can prove important in suppor9ng criminal cases, civil disputes, and employment proceedings. The diverse range of thousands of cases MD5 have successfully been involved with include: Drug traﬃcking, Counterfei9ng, Extor9on, Iden9ty the), Fraud, Human traﬃcking, Internet pornography, Produc9on of false documents, The misuse of Computers by employees (inc. email harrassment; embezzlement; sabotage and industrial espionage (both internal and external.) www.md5.uk.com

Micro Systema4on Stand: 1-F10 Micro Systema9on is a global leader in forensic technology for mobile device examina9on. Founded in 1984, our XRY so)ware has been used by inves9gators since 2003 to quickly and eﬀec9vely retrieve mobile data from a wide variety of electronic mobile devices including GPS satellite naviga9on systems. It has become the de-facto standard within the mobile forensics industry and used worldwide to inves9gate crime, gather intelligence, inves9gate fraud and ﬁght corrup9on. In the UK alone, we supply

www.forensicseuropeexpo.com

98% of UK Police Forces with XRY for mobile device examina9on. www.msab.com

Natural History Museum Stand: 1-D40 NHM Consul9ng use world-leading exper9se in the natural world to provide forensic services where knowledge of natural history can contribute forensic evidence. Services include entomology (using insect evidence to inves9gate 9me since death; human/animal neglect), anthropology (studying human remains), botany (diatoms, plant evidence), mineralogy, zoological evidence and wildlife crime. www.nhm.ac.uk/forensics.

Neogen Europe Ltd Stand: 1-G40 Neogen’s drug detec9on products are used worldwide both for human forensic and animal sport applica9ons. We are the worlds’ largest supplier of hair tes9ng kits and our extensive range of drug detec9on ELISAs includes over 100 kits which can be used to screen over 300 drugs and/or metabolites. www.neogeneurope.com

The Netherlands Forensic Ins4tute www.nﬁ.minvenj.nl

Stand: 1-E34

NicheVision Forensics LLC Stand: 1-C47 ArmedXper:m DNA analysis and mixture interpreta9on so)ware is a casework validated fully integrated so)ware solu9on beginning with a direct import from GeneMapper® ID or ID-X ﬁle, con9nuing with QA/QC controls, powerful matching features, mixture interpreta9on for three contributors, and robust sta9s9cal analysis tools including RMP and Likelihood Ra9o with drop-out.

Nuix Technology Uk Ltd Stand: 1-D45 Nuix is a worldwide provider of informa9on management technologies, including eDiscovery, electronic inves9ga9on and informa9on governance so)ware.

www.forensicseuropeexpo.com

Nuix customers include the world’s leading advisory ﬁrms, li9ga9on support providers, enterprises, government departments, law enforcement agencies, and all of the world’s major corporate regulatory bodies. www.nuix.com

Oxford Instruments Stand: 1-A50 Oxford Instruments, a major UK company, provides a dedicated solu9on for the automated detec9on and analysis of Gunshot Residue using a general-purpose Electron Microscope. This product was designed in conjunc9on with leading forensic scien9sts to meet the requirements of GSR par9cle detec9on and characterisa9on, and conforms to ASTM Standard 1588-10. www.oxford-instruments.com

Perkin Elmer Stand: 1-D23 As a global technology leader, PerkinElmer is taking ac9on to harness the power of insights and transform them into knowledge to deliver innova9ve, diﬀeren9ated solu9ons for our customers. From cri9cal therapeu9c and disease research and prenatal screening, to environmental tes9ng and industrial monitoring, we are ac9vely engaged in improving health and advancing quality and longevity of life all around the world.

From mul9-vendor laboratory services, so)ware and informa9cs, to clinical lab tes9ng and unparalleled customer care, we have the people, tools and resources to help customers solve their business and scien9fic goals. Our core competencies, coupled with our commitment to excellence, provide a strong founda9on for delivering op9mal service and support. By encouraging explora9on, ingenuity and integrity, together with teamwork and employee development, at PerkinElmer we live our mission, every day. www.perkinelmer.com PHENOM-WORLD Stand: 1-A35 The Phenom-World desktop scanning electron microscopes, so)ware and accessories are intui9ve to use, and fast to provide high-quality imaging and complete analysis results. From the entry level Pure series through to the high-end Pro series, Phenom electron microscopes share ease of use, unmatched 9me to results, and worry-free system ownership. www.phenom-world.com Rofin Stand: 1-F40 Rofin was incorporated in 1978 as a private company and has been involved in manufacturing forensic light

Forensics Europe Expo 24 - 25 A pril 2013

Stand: 1-A15 MP Biomedicals MP Biomedicals is a worldwide corpora9on commi:ed to the development, manufacturing and marke9ng of life science and diagnos9cs products. The company is dedicated to providing scien9sts and researchers with the most innova9ve and highest quality tool, combined with superior service to aid them in their quest for ground-breaking discovery and turning the hope for life-changing solu9ons into a reality. MP Biomedicals oﬀers a line of more than 55.000 life science research and diagnos9c products (in the ﬁeld of Molecular Biology, Cell Biology, Immunology, Biochemicals, Rapid Diagnos9c, EIA/RIA Diagnos9c, etc…) that support academic and government research ins9tu9ons as well as pharmaceu9cal and biotechnology companies. www.mpbio.com

Nuix's powerful, intui9ve technology makes it possible to search, inves9gate and ac9vely manage unstructured data sets of any size or complexity. This enables organiza9ons to respond quickly and eﬀec9vely to li9ga9on or regulatory ac9on, mi9gate risks, reduce costs and extract value.

CASE STUDY

Forensics Europe Expo Exhibitor List

Forensics Europe Expo 24 - 25 A pril 2013

Forensics Europe Expo Exhibitor List

sources and related equipment since 1988. Since then we have sold thousands of units around the world to over 77 countries. We have con9nued to develop the product. The Polilight® PL6 (150W) became the PL10 (300W), followed by the PL500 (500W), the PL500 SC, the new PL500 (updated power supply and remote control), the Flare Plus and more recently, the Flare Plus 2, the photographic Accessory Kit, and the New Poliview. Polilight has con9nued to maintain its posi9on as the premier light source in forensic science worldwide. www.roﬁn.com

Saliant Stand: 1-A40 Selec4ve An4bodies Limited Immuno-Assay Novel Technology The aim of the SALIANT project is to develop a handheld device that can be used at crime scenes for the real-9me analysis of explosives, toxic chemicals and drugs. The project has already yielded a very sensi9ve lateral-ﬂow test that can be used by ﬁrst responders at the scene of a crime or terrorist incident to determine what explosives, chemicals or drugs are involved. SALIANT forms part of the EU’s Seventh Framework Programme (FP7). In SALIANT, the Netherlands Forensic Ins9tute (NFI) works together with a large number of public and private sector organisa9ons throughout the EU Sarstedt Stand: 1-E40 Sarstedt is one of Europe’s leading manufacturers of Laboratory Consumables. Our extensive range of Life Science consumables include products for molecular biology produced to the most exac9ng standards.

Staffordshire University Stand: 1-A60 Staffordshire University’s Forensic and Crime Science department offers a range of training and consultancy services in forensic science and criminal inves9ga9on. For professionals, we offer tailored courses to meet the needs of industry, ranging from introductory through to advanced level courses. Delivered in stateof-the-art facili9es by highly qualified staff for your Con9nued Professional Development (CPD) needs.

Starslims Stand: 1-E20 STARLIMS has nearly 25 years of experience helping laboratories op9mize data accessibility, integrity, defensibility and long-term value. STARLIMS oﬀers informa9cs solu9ons to law enforcement and military organiza9ons worldwide, such as the US Army, U.S. Drug Enforcement Administra9on and Maryland State Police. STARLIMS award-winning pla8orm helped labs achieve their analy9cal, regulatory and business objec9ves. www.starlims.com T&F

Stand: 1-D43

Tetra Scene of Crime Stand: 1-C50 Tetra Scene of Crime is a supplier and manufacturer of crime scene inves9ga9on, forensic analysis, Police and security equipment. Since 1994 Tetra has successfully introduced many new and innova9ve products to the Law Enforcement sector , from forensic packaging , ﬁngerprint brushes to the ﬁrst modulised medical examina9on evidence kits.

These include our Biosphere® Plus and PCR Performance ranges which oﬀer reliability, reproducibility and purity. Together with our range of Forensic Swabs, Sarstedt oﬀer a comprehensive range of products for Forensic Science. www.forensicins9tute.nl

We also have a price beater promise on our stock range of over 2000 product lines. If you require VFM Value For Money and the best products available, along with speedy delivery, you have come to the right company. We invent - others copy. We are dedicated to supplying professionals around the world. www.tetrasoc.com

Spectra Analy4cs Stand: 1-B30 Spectra Analysis Instruments, Inc. is a leading provider of automated FTIR detec9on products. When coupled directly to gas chromatography, the DiscovIR-GC is a fully-automated SOLID-PHASE GCFTIR detec9on system. It is capable of achieving the kind of rigorous, repeatable qualita9ve analysis that forensic chemists require for rapidly iden9fying unknown substances and accurately diﬀeren9a9ng chemical isomers. www.spectra-analysis.com

Topcon Europe Posi4oning BV Stand: 1-C25 TOPCON, an innova9ve and global market leading company, develops and manufactures precise posi9oning products and so)ware solu9ons for surveying and civil engineering, earthworks and road construc9on, construc9on site management, mobile asset mapping, precision agriculture and GIS data capturing. TOPCON’s product por8olio exists of high precision GNSS receivers, robo9c and imaging total sta9ons, laser scanners, mobile mapping systems and

SLTN Stand: 1-B35 SLTN specializes in consul9ng, advisory, implementa9on, migra9on issues and management. The core competencies are: consolida9on, virtualiza9on, designing infrastructures for the "new work", management and managed (cloud) services. We can post ICT specialists and deploy addi9onal IT capacity delivered through our own cloud services! www.sltn.nl

TopAir Systems Stand: 1-D21 TopAir Systems is a leading supplier of lab equipment solu9ons, including Cyanoacrylate Fuming Chambers, Ductless Fume Hoods and PCR Cabinets. TopAir is ac9ve across Europe, the Americas and Africa. TopAir's Cyanoacrylate Fuming Chamber develops latent prints from non-porous surfaces in a safe, controlled environment. TopAir conforms to relevant interna9onal standards. www.topairsystems.com

www.forensicseuropeexpo.com

machine control systems supported by handheld controllers, desktop / ﬁeld and management so)ware, telema9cs and accessories. Besides the sales, support and service of posi9oning products and solu9ons TOPCON is ac9ve in eye care and OEM business.

Tubiktak Bilgem www.tubitak.gov.tr

Stand: 1-G0

UKAS Stand: 1-A30 The United Kingdom Accredita9on Service (UKAS) is the sole na9onal accredita9on body recognised by government to assess, against interna9onally agreed standards, organisa9ons that provide cer9ﬁca9on, tes9ng, inspec9on and calibra9on services. UKAS operates under a Memorandum of Understanding with the Department for Business, Innova9on and Skills (BIS), and is a non-proﬁt-distribu9ng company limited by guarantee. www.ukas.com

University College Dublin Pavillion UCD’s School of Computer Science & Informa9cs is host to the Centre for Cybersecurity and Cybercrime Inves9ga9on, Europe's leading centre for research and educa9on. 300+ law enforcement personnel from 47 countries have par9cipated in UCD's Masters programmes in cybercrime inves9ga9on and forensic compu9ng. www.ucd.ie/cci

University of Central Lancashire Stand: 1-A10 The School of Forensic and Inves9ga9ve Sciences is the largest providers of higher educa9on and training in the areas of the forensic sciences, policing, and fire safety in the UK. We are able to offer educa9onal and bespoke training courses from cer9ficate level through to taught masters and research degrees. www.uclan.ac.uk Verisis Stand: 1-G5 VERISIS A.S. is a 25 years old company mainly focused on developing IT solu9ons and consultancy, based on Criminal / Forensic Medicine Laboratories. Our Solu9on, Forensic Laboratories Informa9on Management System (CLIMS) is a complete case management system to provide a chain of custody with DNA, Narco9c Bank/Matching, Mobile CSI and several related add-ons. www.verisis.co/en

VWR Interna4onal Ltd Stand: 1-F40 VWR, headquartered in Radnor, Pennsylvania, is a

www.forensicseuropeexpo.com

VWR enables the advancement of the world's most cri9cal research through the distribu9on of a highly diversiﬁed product line to most of the world's top pharmaceu9cal and biotech companies, as well as industrial, educa9onal and governmental organiza9ons. With over 150 years of industry experience, VWR oﬀers a well-established distribu9on network that reaches thousands of specialized labs and facili9es spanning the globe.

VWR has over 8,000 associates around the world working to streamline the way researchers across North America, Europe, and Asia Paciﬁc stock and maintain their labs. In addi9on, VWR further supports its customers by providing onsite services, storeroom management, product procurement, supply chain systems integra9on and technical services. www.vwr.com

WA Products Stand: 1-F40 WA Products supplies a wide range of innova9ve, top quality consumable forensic equipment which is backed up with a prompt delivery and a ﬁrst class customer service.

Established in 1995, WA Products has evolved into one of the most trusted suppliers in the industry today, able to fully meet the demands of “Just in Time” ordering. Both UK and Interna9onal clients can enjoy shipment of their orders to both single and mul9ple loca9ons direct from our UK base within agreed turnaround 9mes. We aim to be recognised as the benchmark in the supply of forensic kits and consumable equipment that our clients purchase “by choice, not just by necessity". This statement is the driving force that mo9vates and guides us in con9nuously developing new and innova9ve products with the essen9al elements of best value always built in.

Our Company is well known for being Quality driven, offering equipment and services recognised to an Interna9onal standard. Currently we hold ISO9001 Quality and ISO14001 Environmental cer9fica9on with our manufacturing clean rooms cer9fied to ISO14644 Class 5. With a strong adherence to the new PAS377 requirements, WA con9nues to set the quality benchmark for the industry. Our extensive and strong distribu9on network has also played a substan9al role in solidifying our posi9on in both the domes9c as well as interna9onal markets. Today, our products are used by law enforcement agencies all over the world. www.waproducts.co.uk This exhibitor list was correct as of 4 March 2013, if your are interested in exhibi4ng please email Bilal Domah on Bilal.Domah@clarionevents.com or telephone +44 (0)207 384 7942.

Forensics Europe Expo 24 - 25 A pril 2013

Torchlight Solu4ons Ltd Stand: 1-F40 Torchlight works seamlessly with clients and partners to deliver proac9ve eﬀects that mi9gate the threats posed by terrorist, insurgent and criminal groups. Torchlight's integrated counter threat services fuse tradi9onal and emergent techniques from accross the intelligence, exploita9on and law enforcement sectors in order to safeguard lives, organisa9ons and reputa9ons. www.torchlight-solu9ons.com

global laboratory supply and distribu9on company with worldwide sales in excess of $4.1 billion in 2011.

CASE STUDY

Forensics Europe Expo Exhibitor List

Forensic Innovation Conference Programme - Day One: WEDNESDAY 24 APRIL 2013 08.00 - 08.45: COFFEE/REGISTRATION

08.45 ; 09.00: CHAIRMAN’S OPENING REMARKS Dr Ann Priston, Chair Forensic Science Society

Changing Forensic Landscape

09.00 ; 09.20: FORENSIC;LED POLICING: CHALLENGES AND OPPORTUNITIES Chief Constable Chris Sims, Forensic Science lead, Association of Chief Police Oﬃcers and Chief Constable, West Midlands Police 09.20 ; 09.40: APPLYING FORENSIC PRINCIPLES TO THE INVESTIGATION PROCESS Callum Sutherland, Vice President, Forensic Science Society 09.40 - 10.10: ROUND TABLE

10.10 - 10.40: COFFEE/TEA/EXHIBITION VISIT

Crime Scene investigation/Examination

10.40 ; 11.00: FACTORS AFFECTING THE QUALITY OF CRIME SCENE INVESTIGATION Dr John Bond, OBE, Senior Lecturer, Department of Chemistry, University of Leicester 11.00 ; 11.20: CSI: THE HAGUE A REVOLUTIONISING CRIME SCENE INVESTIGATION THROUGH DIGITAL RECONSTRUCTION Prof Dr Arian C Van Asten, Department Head, Netherlands Forensic Institute 11.20 ; 11.40: RE;EXAMINING A CRIME SCENE TO MAXIMISE THE EVIDENTIAL POTENTIAL IN ARSON INVESTIGATIONS Andrew Wade, Lead Forensic Scientist, First Forensics 11.40 - 12.10: ROUND TABLE

12.10 - 13.40: LUNCH/EXHIBITION VISIT

Law Enforcement Application

13.40 ; 14.00: FORENSIC IDENTIFICATION OF PEROXIDE EXPLOSIVES IN THE 21/7 LONDON BOMBINGS Ray Fysh, Senior Lecturer, Evironmental Proﬁling Unit at University of Reading 14.00 ; 14.20: THE APPLICATION OF ECOLOGY, BOTANY AND MYCOLOGY IN CRIMINAL INVESTIGATION Dr Patricia Wiltshire, Forensic Botanist and Dr David Hawksworth, MBE, Forensic Mycologist 14.20 ; 14.40: MAXIMISING THE POTENTIAL OF TRACE FIBRE EVIDENCE Tiernan Coyle, Lead Forensic Scientist, Contact Traces 14.40 - 15.10: ROUND TABLE

15.10 - 15.40: COFFEE/TEA/EXHIBITION VISIT

Innovative Technology/Research

15.40 ; 16.00: UNLEASHING FORENSIC DNA THROUGH COMPUTER INTELLIGENCE Dr. Perlin, Cybergenetics 16.00 ; 16.20: IDENTIFICATION FROM HAND ANATOMY TO IDENTIFY CHILD ABUSE Professor Sue Black, Director, Centre for Human Anatomy and Identiﬁcation, University of Dundee 16.20 ; 16.40: THE INTERACTION BETWEEN FORENSIC TECHNOLOGY AND HUMAN INVESTIGATION Dr Itiel Dror, Institute of Cognitive Neuroscience, Department of Science, University College London 16.40 ; 17.00: ATTRIBUTION OF CHEMICAL AND BIOLOGICAL AGENTS Dr Cerys Rees, Capability Lead – CB Analysis and Attribution Detection Department, DSTL, Porton Down 17.00 - 17.30: ROUND TABLE

17.30: CLOSE OF DAY ONE

Book today at www.forensicseuropeexpo.com/programme

Forensic Innovation Conference Programme - Day Two: THURSDAY 25 APRIL 2013

DNA

08.00 - 08.45: COFFEE/REGISTRATION

08.45 - 09.00: JOINT CHAIRMAN’S OPENING REMARKS Prof dr Arian C Van Asten, Department Head, Netherlands Forensic Institute Ric Treble, Scientific Advisor LGC Forensics

Innovation in Forensic Provision

09.00 ; 09.20: INNOVATION IN SHARED SERVICES: HAMPSHIRE CONSTABULARY, HAMPSHIRE COUNTY COUNCIL AND THE UNIVERSITY OF PORTSMOUTH A A CASE STUDY Terry Lowe, Head of Scientific Support, Hampshire Constabulary and Dr Paul Smith, Senior Lecturer, Forensic Science, University of Portsmouth 09.40 - 10.00: HISTORIC OFFENCES: FORENSIC REVIEWS AND WORKING TOGETHER Cathy Turner OBE and Tracy Alexander, Case Review Specialists, LGC Forensics 10.00 - 10.30: ROUND TABLE

10.30-11.00: COFFEE/TEA/EXHIBITION VISIT

Ensuring Reliability/Accuracy of Evidence

11.00 ; 11.30: COMMERCIALISING FORENSIC SCIENCE FOR THE CRIMINAL JUSTICE SYSTEM; INQUISITORIAL V ADVERSORIAL Karen Squibb-Williams, Barrister, Senior Policy Advisor, Crown Prosecution Service 11.30 ; 12.00: ITS CALLED ACREDITATION, WHO NEEDS IT? Professor Allan Jamieson, Director, The Forensic Institute 12.00 - 12.30: ROUND TABLE

12.30 - 14.00: LUNCH/EXHIBITION VISIT

14.00 ; 14.20: INNOVATION IN DNA EVIDENCE IN THE NETHERLANDS Prof dr Ate Kloosterman, DNA exper,t Netherlands Forensic Institute 14.20 ; 1440: FAMILIAL SEARCHING A A RELATIVE SUCCESS? Martin Bottomley, Head of Greater Manchester Major Crime Review Team and DS Chris Holt, Greater Manchester Police Major Incident Team 14.40 ; 15.00: TRIPLE HOMICIDE A CONNECTING A SUSPECT TO A CRIME BY DNA TESTING OF FAECES Joseph A Prahlow, Forensic Pathologist, South Bend Medical Foundation, University of Notre Dame, USA 15.00 - 15.30: ROUND TABLE

15.30 - 16.00: COFFEE/TEA/EXHIBITION VISIT

Fingerprints

16.00 ; 16.20: CURRENT LEGAL CHALLENGES AND PROBLEMS AROUND PRESENTING FINGERPRINT EVIDENCE IN COURT Allan Bayle, Independent Fingerprint Expert and former Met Police Fingerprint Bureau expert 16.20 - 16.40: FINGERPRINT EVIDENCE - RELIABLE OR NOT? Catherine Tweedy, Expert Witness 1640 ; 1700: PROFICIENCY TESTING OF FINGERPRINT EXPERTS; CHALLENGES AND BEST PRACTICE Peter Whent, Expert Witness, Competency Assessment Services 17.0 0- 17.30: ROUND TABLE

17.30: CLOSE OF CONFERENCE

Book today at www.forensicseuropeexpo.com/programme

Digital Forensic Conference Programme - Day One: WEDNESDAY 24 APRIL 2013 08.00 - 09.15: COFFEE/REGISTRATION

09.15 - 09.30: CHAIRMAN’S OPENING REMARKS Roy Isbell, Editor Digital Forensics Magazine

Evidence Retrival and Analysis

09.30 ; 10.00: DIGITAL FORENSIC TRIAGE: MAXIMISING RESOURCES AND REDUCING THE FORENSIC BACKLOG Harry Parsonage, Forensic Triage Specialist 10.00 ; 10.30: DIGITAL FORENSICS A CURRENT CHALLENGES AND TRENDS Dr Neil Cohen, Home Oﬃce Centre for Applied Science and Technology (CAST) 10.30 - 11.00: COFFEE/TEA/EXHIBITION VISIT

Trends and challenges in mobile forensics 11.00 ; 11.20: BIG DATA IN MOBILE DEVICES A TURNING A BURDEN INTO AN INVESTIGATIVE ASSET Yuval Ben-Moshe, Forensic Technical Director, Cellebrite 11.20 ; 11.40: “MINING THE MOUNTAIN: THE EXPLOSION OF MOBILE FORENSICS DATA”. Paul Baxter, UK and Ireland Manager, Microsystemation 11.40 ; 12.00: MAKING SENSE OF MASS MOBILE PHONE DATA: REAL WORLD CASE STUDIES Dr Richard Leary, MBE, Forensic Pathways & Det Sgt Peter Salter, MSc (Computer Forensics), ECrime, Police Service Northern Ireland 12.00 - 12.30: ROUNDTABLE

12.30-14.00: LUNCH/EXHIBITION VISIT

Trends and challenges in computer forensics

14.00 ; 14.20: BYPASSING PASSWORDS AND USING RESTORE POINTS WITHIN A VIRTUAL MACHINE Michael Penhallurick, Visualisation Forensics consultant 14.20 ; 14.40: FORENSIC IMAGE AND MEMORY ACQUISITION FROM THE CLOUD Liban Mohamud, researcher, University College, Dublin 14.40 ; 15.00: GOAL;DRVEN COMPUTER FORENSIC INVESTIGATION Benjamin Aziz, Lecturer, School of Computing, University of Portsmouth 15.00 - 15.30: ROUND TABLE

15.30 - 16.00: COFFEE/TEA/EXHIBITION VISIT

Research/innovation

16.00 ; 16.20: A STRUCTURED APPROACH TO FORENSIC EVIDENCE MANAGEMENT Clive Blackwell, Information Security Group, Royal Holloway, University of London 16.20 ; 16.40: PRESENTATIO N TBC Dr Pavel Gladyshev MSc PhD, University College Dublin, School of Computer Science and Informatics 16.40 ; 17.00: CAMERA DNA ; FIA A NEW TECHNOLOGY LINKING IMAGES TO MOBILE PHONES & CAMERAS Dr Richard Leary, MBE, Forensic Pathways & Herwig Lejsek, MSc, Videntifier Technologies & Interpol ICSE Database Project 17.00 - 17.30: ROUND TABLE

17.30: CLOSE OF DAY ONE

Book today at www.forensicseuropeexpo.com/programme

Digital Forensic Conference Programme - Day Two: THURSDAY 25 APRIL 2013

Network Forensics

08.00 - 09.15: COFFEE/REGISTRATION

09.15 ; 09.30: CHAIRMAN’S OPENING REMARKS Deb Leary, OBE, Chief Executive Forensic Pathways

Law Enforcement Challenges

09.30 ; 09.50: USING DIGITAL DEVICES AS EVIDENCE IN THE SUZANNE PILLEY HOMICIDE INVESTIGATION Det Supt Gary Flannagan, Lothian and Borders Police Major Incident Team 09.50 ; 10.10: USE OF FORENSIC TELEPHONE EVIDENCE IN OPERATION LEYDON DCI Robbie Slater Merseyside Police Matrix Team 10.10 ; 10.30: BEST PRACTICE IN DIGITAL FORENSICS IN THE NETHERLANDS POLICE Dr Bart Custers, Project Leader Technology in Policing, Department of Security and Justice, The Netherlands 10.30 - 11.00: COFFEE/TEA/EXHIBITION VISIT

Cellsite Analysis

11.00 ; 11.30: USING CELLSITE ANALYSIS TO LOCATE VICTIMS AND OFFENDERS IN CRIMINAL INVESTIGATIONS Andy Townsend Footprint Investigations 11.30 ; 12.00: THE PITFALLS OF CELL SITE ANALYSIS Dr Iain Brodie, Senior Cell Site Expert 12.00 - 12.30: ROUND TABLE

12.30 - 14.00: LUNCH/EXHIBITION VISIT

14.00 ; 14.30: COMBATING ADVANCED PERSISTENT THREATS TO NETWORK Andrew Beckett, Head of Consulting and Professional Services of Cassidian Cyber Security

Evidence Management & Standards

14.30 ; 15.00: NEW TECHNOLOGY FOR THE MANAGEMENT OF MOBILE DIGITAL INVESTIGATIONS: FDX ; NEW COLLABORATIVE TECHNOLOGY Dr Richard Leary, MBE, Forensic Pathways, Eddie Fisher, Digital Electronic Forensic Services, High Tech Crime, Met Police & Det Sgt Peter Salter, MSc (Computer Forensics), E-Crime, Police Service Northern Ireland 15.00 - 15.30: ROUND TABLE

15.30 - 1600: COFFEE/TEA/EXHIBITION VISIT

Open Source Intelligence

16.00 ; 16.30: ARMCHAIR INTELLIGENCE A USING OPEN SOURCE INTELLIGENCE IN CRIMINAL INVESTIGATIONS Neil Smith, Avon and Somerset Police (retired) Investigative Researcher and Trainer 16.30 ; 17.00: USE OF OPEN SOURCE DATA IN FRAUD IDENTIFICATION Mike Hodge, Head of Research and Profiling, Cotswold Group 17.00 - 17.30: ROUND TABLE

17.30: CLOSE OF CONFERENCE

Book today at www.forensicseuropeexpo.com/programme

BEST PRACTICE

Health warning

HS Fraud costs the public purse millions in lost revenue each year and such crimes are o%en complex in nature. Steve McKenzie, the former head of the NHS Counter Fraud Service (now NHS Protect) Dental Fraud Team, iden4ﬁed common features between current and historical fraud cases and describes their impact on the NHS.

The avenues exploited by NHS fraudsters are o)en ingenious and test the most experienced counter fraud specialist. Conversely some crimes are unsophis9cated and rely upon the high volume submission of bogus documenta9on to succeed. Recently I have reﬂected upon media repor9ng of a:acks by criminal gangs targe9ng the UK tax credits system. Despite repeated cri9cism by the Public Accounts Commi:ee we are s9ll missing the target to tackle such crime. The methods used by the perpetrators are o)en basic and, drawing upon my own experience, install in me a sense of déjà vu.

If fraud losses are suﬀered by UK PLC people may perceive that crime against the state is a vic9mless crime. Some may even believe that

www.the-investigator.co.uk

they are taking back monies owed to them through disparate taxa9on; their mo9va9on directed more through a misplaced loyalty to the prac9ces of Robin Hood than Bernie Madoﬀ. In the NHS it is not uncommon for a doctor or den9st to state, when arrested for making false payment claims, that they believe the State pays them too li:le for undertaking complex treatments on pa9ents. They see this not as fraud but as compensa9on. The reason they can do this? Because they are in a high trust environment where the NHS pays them up front and relies upon them to submit correct claims to the payment authori9es. Luckily, the courts take such abuse of trust very seriously and a ‘parallel sanc9ons’ approach of prosecu9on, pursuing ﬁnancial res9tu9on and referral to

Issue 1 - 2013

LEVERAGING THE BEST PHONE INVESTIGATION TECHNIQUES Simple and easy-to-use User Interface Ease of use and simplicity make the application accessible to a large panel of investigators and field officers. Standard training limited to 3 days only. All functionalities available in a few clicks. Built-in investigation queries (no programming).

Analytical software for phone data

Numerous content visualisation techniques - Link charting - Common numbers charting - Cell-site profiling and mapping - Temporal and spatial analysis - Call locations geographic display - Call density and heatmap analysis - CDR geographic matching - Prepackaged analysis reports

Simple and easy-to-use User Interface Ease of use and simplicity make the application accessible to a large panel of investigators and field officers. Standard training limited to 3 days only. All functionalities available in a few clicks. Built-in investigation queries (no programming). Numerous content visualisation techniques - Link charting - Common numbers charting - Cell-site profiling and mapping - Temporal and spatial analysis - Call locations geographic display - Call density and heatmap analysis - CDR geographic matching - Prepackaged analysis reports

Heatmap of frequent locations

Phone profiling

OCKHAM Solutions

In some cases prosecu9ons have failed but fraud was s9ll present and further ac9on was possible. The professional standing of the accused some9mes leads their peers to ques9on the sheer audacity of the NHS in bringing a prosecu9on; let alone one that has failed. In one such case a £2million trial was halted and a robust examina9on of the evidence and the charging decision by the Crown Prosecu9on Service was sought by the defendants and their advisors. Interes9ngly, the £2million would arguably s9ll have been recovered by the NHS as an overpayment had an escape route through UK insolvency legisla9on not been u9lised. Nevertheless, once alerted to the scam proac9ve scru9ny of other ins9tu9ons exploi9ng the same ini9a9ve led to many millions more being saved. Government departments however have not yet caught up in terms of a holis9c approach to fraud. Beneﬁt and taxa9on fraud response is s9ll very much a work in progress. This is not surprising as historically losses were tolerated by management if within acceptable margins. During the early ‘nough9es’, for example, HM Treasury were repor9ng a reduc9on in fraud with 19 civil service departments submi;ng a ‘nil’ return for 2003/04(1) . With hindsight this is arguably because no system was in place to proac9vely iden9fy and measure fraud risks. Today, with fraud enjoying a much higher proﬁle, it is surprising that HMRC s9ll falls foul to organised crime against its processing systems. Surprising not only because of the perceived inability to stop tax credit abuse but also because no acknowledgement is made that NHS fraud can be a by-product. The total elimina9on of fraud is unlikely ever

to be achieved but at least now there is some semblance of recogni9on of the problem. It is universally recognised that inves9gators report on systems failures, develop strategies to prevent reoccurrence and remain open to and share good prac9ce. Nevertheless, the media are repor9ng examples of frauds today of the type I was inves9ga9ng ten or more years ago. The only difference is that (1) the administra9on of the systems being defrauded has shi)ed through Government reorganisa9ons and (2) criminal methods have been adapted to keep pace with new technology. We know that HMRC has a con9nuing problem with tax credit fraud. This is not the first 9me however that government tax relief ini9a9ves have fallen foul of ambi9ous criminals. In April 1992 Voca9on Training Relief Allowance (VTR) was introduced to encourage people to obtain voca9onal qualifica9ons. This provided a vehicle for fraudsters, under the guise of training providers, to devise methods of collec9ng iden9ty details from an unwi;ng public and submit claims for ‘tax relief’. The most lucra9ve fraud I inves9gated involved a bookkeeping course under the banner of ‘The Learning Library’. Robert Webb and Moira Simpson were convicted at Snaresbrook Crown Court of chea9ng the public purse of £1.9 million. This case is significant as the A:orney General appealed against the leniency of the sentence imposed. Originally Webb was fined £694,000 and Simpson £106,000 with a £1.6 million confisca9on order awarded. Following a submission to the Court of Appeal Webb addi9onally received four and a half years imprisonment and Simpson a minimum of eighteen months. Effec9vely this was an early case of parallel sanc9ons now used extensively in the NHS; Webb and Simpson not only lost their liberty but the loss to the

(1)HM Treasury. 2004. 2003 – 2004 Fraud Report: An analysis of reported fraud in Government Departments. London: HM Treasury.

www.the-investigator.co.uk

Issue 1 - 2013

BEST PRACTICE

relevant professional bodies for disciplinary ac9on, is one key component in promo9ng an an9-fraud culture.

BEST PRACTICE

Exchequer was made good.

persistence paid oﬀ as £87,000 was One illegally paid out. Thomas was factor in this imprisoned for seven years. could have been His Honour Judge Kennedy HMRCs absorp4on of said that this was ‘no less ‘beneﬁts’ administra4on than a criminal industry….designed to using systems primarily maximise the loss to the developed for tax public’(3) . And yet the fraud was simple; the same addresses collec4on.

So were any lessons learnt? Clearly not. In September 2000, the Department for Educa9on and Skills introduced the ill feted Individual Learning Accounts (ILA) to widen par9cipa9on in learning through government provision of financial assistance. This was VTR in a different guise administered by a different government department. A year later the ILA scheme was withdrawn on police advice. By August 2002 Inves9gators suspected 133 ILA providers of submi;ng suspicious claims totalling £167 million. The two year budget for ILA budget stood at £199 million! A correla9on can also be drawn between today’s tax credit and single parent benefit frauds and Opera9on Fourtrak, a joint Inland Revenue/City of London Police inves9ga9on in the early 1990s. On 12 March 1995, the Mail on Sunday(2) reported that 15 addresses were raided and four people charged with Chea9ng the Public Revenue. I was the lead inves9gator on Opera9on Fourtrak and remarkably, eighteen years later, the reported modus operandi of the organised criminal gangs has changed li:le. No sophis9cated technology on the fraudster’s part just simple manipula9on of the process now/check later customer service mantra. Despite assurances to the contrary this type of decep9on s9ll evades civil service department internal detec9on systems. In July 2012 Adeola Thomas was convicted at Southwark Crown Court of submi;ng 2,495 handwri:en applica9on forms to HMRC and the DWP in an a:empt to claim £3.8 million in tax credits and Social Fund payments. The majority of the claims were rejected but (2)

Newton, R (1995, March 12). Dawn tax raid. Mail on Sunday

were used to generate mul9ple claims in the names of genuine taxpayers. Those people simply had their correct details corrupted to enable monies to be paid into bank accounts controlled by Thomas. With such a high volume of claims the availability of addresses for use by Thomas would be limited. Therefore, a simple check on the number of persons registered for tax and/or benefit purposes per address should, in theory, be within the technological ability of the relevant government department. Such a check is commonplace amongst credit reference agencies. Thomas’s crime demonstrated to me that history had repeated itself. The Opera9on Fourtrak ring leaders obtained genuine taxpayer details from discarded payslips or procured personal details through deceit. At that 9me tax relief was awarded to married men and unmarried women with a child. The tax codes on the misappropriated payslips iden9fied those outside of those categories. The fraudsters then simply wrote a le:er to the person’s tax office falsely sta9ng that they were either married or gave birth to a child up to six years earlier. At the same 9me they gave a change of address. Six years was the maximum period for claiming a tax repayment in these circumstances and, in order to meet Fraudsters jailed for £3.8m tax credits and benefits scam bid. HMRC Press Release http://hmrc.presscentre.com/Press-Releases/Fraudsters-jailed-for-3-8m-tax-credits-and-benefits-scambid-680cf.aspx

(3)

www.the-investigator.co.uk

Issue 1 - 2013

In the 1990s the Inland Revenue had trip wires highligh9ng if more than five different individuals were registered to an address. To circumnavigate this, the fraudsters would claim for five people at No. 1 High Street, five at No. 1A, five at 1B and so on. These claims would be submi:ed to any one of the many tax offices then in existence. Therefore, although all of the le:ers looked the same, the chances of someone spo;ng mul9ple claims in any one office were slim. It was only when mul9ple claims from individuals who worked for one employer, and therefore used the same tax office, were submi:ed that a pa:ern was established; an alert was then sent to all tax offices and further claims were refused. However, the ma:er did not end there as the fraud methodology changed. The fraud gang set up a bogus tax repayment agency called Circle G Financial Services. Claims were now submi:ed with a bogus request reques9ng that all cheques be made to one George Aramide; the taxpayers ‘agent’. Aramide completed all documenta9on on behalf of his ‘client’ who actually knew nothing about the claim. However, the basic premise of the fraud remained the same. In December 1996, at Snaresbrook Crown Court, Aramide was convicted and received 21 months imprisonment for forgery and false accoun9ng. The final cost of the fraud will never be known but Opera9on Fourtrak had implica9ons beyond this convic9on. Aramide, and others like him, had effec9vely corrupted the tax records of a large number of people. In the detected cases the Inland

www.the-investigator.co.uk

BEST PRACTICE

customer service deadlines, the bogus details were entered onto the Inland Revenue’s computer system and a repayment cheque generated to the new address. All claims were handwri:en by four individuals, contained similar wording and requested that cheques be sent to one of a small number of addresses.

Revenue were able to rec9fy the tax code of the original genuine taxpayer whose iden9ty had been stolen. The problem was, in a considerable number of cases, there was no record of the person’s current address or employer. This was compounded by the transient nature and ethnicity of many of the vic9ms and the use of temporary Na9onal Insurance numbers that failed to correlate with other government systems. Where false claims were not detected people benefited from tax allowances they were not en9tled to. Although the tax repayment had gone to the criminals the tax code, pu;ng the bogus change into opera9on, remained with the genuine taxpayer; thereby unwi;ngly providing an on-going financial benefit from the fraud. Of further relevance is that many of these people had fairly low paid jobs. The fraudulently generated increase in personal allowance could have therefore kept them outside of the income tax threshold and less likely to be iden9fied. This aspect of the fraud caused understandable consterna9on from the tax authori9es. Opera9on Fourtrak is therefore significant as the Inland Revenue was caught out and internal audit sought to prevent a reoccurrence. Following the merger with HM Customs and Excise, announced in the 2004 Budget, one could speculate if the new HM Revenue and Customs developed an effec9ve IT system to prevent fraud against it. Given

Issue 1 - 2013

BEST PRACTICE

civil servants at the Livingstone Tax Credit Helpline, were later each jailed for 30 months at Edinburgh Sheriff Court for their part in embezzling £250,000. They passed on genuine taxpayer informa9on to others who submi:ed bogus addi9onal children or changed personal circumstance claims to generate an illegal payment. Yet again it appears that the lessons learnt from Opera9on Fourtrak had been ignored. media reports and con9nued cri9cism by the Public Accounts Commi:ee since, I would suggest not. One factor in this could have been HMRCs absorp9on of ‘benefits’ administra9on using systems primarily developed for tax collec9on. However, the similari9es between Opera9on Fourtrak and the Adeola Thomas case are clear to see. What is even more remarkable is that Thomas’s fraud took place between January 2007 and October 2011; a)er HMRC claimed to have 9ghtened up on tax credit fraud. In October 2005 the House of Commons Treasury Select Commi:ee discovered a £2.2 billion overspend on tax credits for 2003-04. It recognised that the culture of paying out claims first and later recovering overpayments had led to organised crime gangs targe9ng the scheme. BBC News quoted a HMRC source as sta9ng that ‘Organised crime goes a)er the low-hanging fruit’(4) but that robust measures were in place to combat criminal behaviour. More worryingly, in October 2004 the Sunday Mail in Scotland reported that HMRCs family tax credit HQ in Dundee had been raided by fraud inves9gators. Staff were implicated in false claims for ‘thousands’ of children who did not exist. Nasir Ahmed and Imran Ayub, (4) Scott-Joynt (2005, 31 October). Tax credits’targeted by gangs’ . BBC News http://news.bbc.co.uk/1/hi/business/4385690.stm

So what other significant events happened between 2004 and 2007 when Thomas first started his a:ack on the tax credit system? Where were the ‘robust’ measures? In addi9on to Ahmed and Ayub being imprisoned another HMRC worker, Mobolaji Olayinka, stole the iden99es of 1,029 people and sold them to a gang who claimed £1.3 million in tax credits. Olayinka received four and a half years imprisonment at Southwark Crown Court in March 2007. Incredibly the same address, star9ng in 2004, was used for 76 of the fraudulent applica9ons over a 14 month period. Instead of pu;ng systems in place to prevent fraud there now seemed to be an open invita9on to fraudsters. A series of media reports then surfaced. In December 2005 it was reported that HMRC had shut down its on-line tax credit line a)er up to 13,000 Job Centre staff may have had their iden99es stolen for false tax credit claims. As a result, in April 2011 Olajumoke Ademuyiwa a former Jobcentre Plus employee was jailed for four years at Inner London Crown Court for a £1.3 million tax credit fraud. She used the stolen iden99es of at least 350 people to submit over 300 false claims. By March 2006 it was also reported that up to 5,300 Network Rail staff, one in six of their employees, may have had their iden99es used in a tax credit fraud. In June Carlin, B. 2006. Tax credit policy is losing £1.3bn a year to fraud and errors. Daily Telegraph [Online, 12 July]. http://www.telegraph.co.uk/news/uknews/1523682/Tax-creditpolicy-is-losing-1.3bn-a-year-to-fraud-and-errors.html (5)

www.the-investigator.co.uk

Issue 1 - 2013

With all of this interest it seems incongruous that Thomas was able to start his fraud in January 2007 and not be detected un9l October 2011 when he was arrested. However, in the period between January 2011 and May 2012 a further four cases were prosecuted. These further the)s from HMRC exceeded £6 million and most of the offences were commi:ed up un9l the middle of 2010. The above scenarios are clear examples of central government failing to fraud proof new ini9a9ves and not learning from past mistakes. Earlier I highlighted that o)en the NHS can be defrauded as a by-product of the tax credit and benefit fraud. The impact of this has not been assessed and it remains a hidden loss to the NHS. Each false tax credit or benefits claim could enable the individual to receive free prescrip9ons, dental treatment and help with op9cian costs. If at the 9me the claimant received NHS treatment their benefit fraud was undetected then the exemp9on from NHS charges was deemed genuine. However, if the benefit or tax credit claim was later found to be false no recovery of the NHS fee is made. This is because HMRC and the Department for Work and Pensions (DWP) only liaise with the NHS on current cases and do not retrospec9vely check claims. One good example of this is the case of Ruth Nabuguzi. She was part of a Ugandan crime gang who are believed to have stolen around £1.6 million from the UK benefits system. Addi9onally, Nabuguzi used her own and four other bogus iden99es to

www.the-investigator.co.uk

BEST PRACTICE

2006 it was revealed that supermarket groups and large manufacturers were also being targeted with up to £50 million being defrauded. By July 2006 the media quoted the Na9onal Audit Office’s own figures that almost 10.6 per cent (£1.3 billion) of the total amount paid in 2003-04 was lost through fraud and error. The Telegraph reported that fraudsters successfully stole £131 million from HMRC in 2005 alone(5). claim exemp9on from NHS prescrip9on charges due to her [fraudulent] claims for Disability Living Allowance. Purpor9ng to suffer from AIDS/HIV Nabuguzi obtained NHS drugs with a value of £2.3 million for free and sold them abroad for profit. Nabuguzi received six years imprisonment at Croydon Crown Court in November 2012. In addi9on, one of Nabuguzi’s co-defendants Lina Katongola worked as a nurse and was jailed for making a false naturalisa9on applica9on to the Home Office. This evokes another current threat to the NHS; nurses who have made false immigra9on status claims to receive NHS bursaries and obtain employment in hospitals. Although such cases have been sporadically reported in the media no assessment of the collec9ve impact has been publicised. There certainly appears to be some way to go un9l a cure for the afflic9on that is public sector fraud is found. Steve McKenzie is the former head of the NHS Counter Fraud Service (now NHS Protect) Dental Fraud Team. His career as a fraud specialist commenced in 1985 where he spent 17 years undertaking criminal prosecu0ons with HM Revenue and Customs. In 2002 he moved to the NHS and most recently inves0gated overseas corrup0on as a Principal Inves0gator at Serious Fraud Office. From 2003 to 2011 he was Treasurer and Execu0ve Commi1ee member of the Ins0tute of Counter Fraud Specialists.

Issue 1 - 2013

FORENSICS

The technology tool kit

s inves4gators contend with vast amounts of digital evidence across an increasing number of devices, they are ﬁnding their technology tools are not up to the challenge. Electronic inves4ga4ons are taking too long to complete, which blows out costs and leaves a growing pile of unsolved cases. Dr James Kent looks at how inves4gators must evolve their approach to tackle inves4ga4ons in the age of big data.

Since I ﬁrst became involved in digital forensics in the late 1990s, the number of devices and volume of data involved in cases has consistently doubled about every two years. Forensics specialists must deal with nearly 200 9mes as much data today as they did when I started out – in many cases there are terabytes of poten9al evidence.

Although computers have become faster and cheaper, there is a growing gap between the volume of data involved in inves9ga9ons and our ability to process, understand and extract

evidence from it.

The tradi4onal approach to digital inves4ga4on Most inves9gators follow the same methodology for every device they evaluate: they plug the device into a write blocker, acquire a forensic image of the en9re device, make a copy of the forensic image, analyse the data stored on the forensic image copy and write a report on the results of this analysis. A)er analysing each device in this way, they then try to ﬁnd connec9ons

Issue 1 - 2013

www.the-investigator.co.uk

Tradi9onal data forensics tools cannot thoroughly analyse complex informa9on stores such as Lotus Notes, Microso) Exchange, Microso) SharePoint and email archives. They are not designed to extract evidence from cloud services such as Gmail or Hotmail. In addi9on, they do not iden9fy or organise important intelligence such as names, email addresses, phone numbers and credit card numbers – inves9gators have to know what they are looking for. Human inves9gators, however brilliant, can’t hope to crossreference and find correla9ons across millions of data points. It is too easy to miss connec9ons. Something has to shi). If we con9nue to inves9gate electronic evidence using the same tools and techniques, unsolved cases will pile up and bad guys will keep ge;ng away with it. A more efficient method: forensic triage In recent years, I have seen inves9gators taking a different approach and achieving the same or be:er results, much faster. This approach draws from the experience of other disciplines such as legal discovery and informa9on governance, where dealing with massive volumes of data is the norm. It involves collec9ng all available data in a single storage loca9on, then analysing it all with increasing depth un9l the key evidence emerges. This approach works because, in a large majority of cases, the cri9cal evidence is hidden in plain sight rather than in the forensic artefacts that inves9gators spend so

www.the-investigator.co.uk

much 9me analysing. The forensic triage process works as follows: 1. Ingest all data. The first stage of this process requires inges9ng all data sources, or forensic images of those sources, into a single repository. 2. Conduct a light metadata scan. A light metadata scan tabulates informa9on such as the owner or sender, size, format and relevant dates for each file and email message in the evidence store. 3. Analyse basic rela4onships between people and evidence. Using techniques such as network diagrams and 9melines, inves9gators can see connec9ons and flows of informa9on between suspects or custodians. This can help quickly narrow down which data sources to inves9gate in greater depth or bring to light addi9onal areas or people to inves9gate. 4. Deeply index relevant data sources. Having iden9fied the most likely sources of cri9cal evidence, inves9gators now extract full text and metadata from those sources. They can then use their standard inves9ga9ve workflows to search for evidence. 5. Cross-reference intelligence. Advanced inves9ga9ve tools can automa9cally extract and highlight intelligence items such as names, email addresses and phone, credit card and bank account numbers. This provides a window into the evidence that can show rela9onships between people and en99es across mul9ple data sources, deliver points to prove and also offer broader intelligence. It brings to light connec9ons that human inves9gators might miss. 6. Forensically examine only the most likely data sources. If this process has not already located cri9cal evidence, it will almost

Issue 1 - 2013

FORENSICS

between the evidence they have uncovered. While this approach is fas9diously thorough and forensically sound, it is immensely 9me consuming.

FORENSICS

certainly provide clues as to where it might be. Inves9gators can then use their digital forensics skills to dig deep into the likeliest data sources. In this way, they avoid spending countless hours forensically analysing irrelevant material. Clear your head – and your toolkit It can be confron9ng to change a well-known and proven methodology. It requires courage and clear-headed analysis. For example, ask yourself how o)en you have solved a case based on deleted data extracted from slack space, compared to the number of cases where the key evidence was in email, documents, web history or other obvious sources.

Inves9ga9ng across all data sources simultaneously, rather than one at a 9me, is a much more eﬃcient and sophis9cated method to extract points to prove or intelligence across large volumes of data. For inves9gators, this makes it possible to cross-reference and discover hidden connec9ons across mul9ple data sources. You can also access data stored in complex corporate repositories and cloud-based services and massively reduce the strain on brainpower and person-hours. Is all this possible using a single technology tool? It’s my job to tell you yes, but I don’t expect you to take my word for it. Instead, I invite you to do your own research and evaluate the available op9ons.

Nuix is a worldwide provider of informa4on management technologies, including eDiscovery, electronic inves4ga4on and informa4on governance so%ware.

Nuix's powerful, intui4ve technology makes it possible to search, inves4gate and ac4vely manage unstructured data sets of any size or complexity. This enables organiza4ons to respond quickly and eﬀec4vely to li4ga4on or regulatory ac4on, mi4gate risks, reduce costs and extract value.

Dr James Kent is Head of Inves0ga0ons at Nuix and a pioneering digital forensics inves0gator with more than 15 years experience as an advisor to law enforcement, government, ﬁnance and business.

Nuix customers include the world’s leading advisory ﬁrms, li4ga4on support providers, enterprises, government departments, law enforcement agencies, and all of the world’s major corporate regulatory bodies. www.nuix.com

Issue 1 - 2013

www.the-investigator.co.uk

he threat of serious and organised crime and the safety and security of our borders cannot be underestimated. DI Andrew Staniforth from the North East Counter Terrorism Unit reports.

In direct response to the increased post-9/11 terrorist threat from al Qaeda, the Bri9sh government appointed Lord Carlile of Berriew CBE QC as Independent Reviewer of Terrorism Legisla9on (IRTL) during 2001. In more than nine years as Independent Reviewer, Lord Carlile spent a considerable propor9on of his 9me on ports and border security. This was perhaps a mundane part of the reviewer’s rou9ne, but its importance struck him very quickly. As he stood behind Special Branch oﬃcers at UK airports he realised how many extremely speedy judgements fall upon them, with a complex body of intelligence and law si;ng on their shoulders.

www.the-investigator.co.uk

He also observed the ques9oning of passengers and stated that: “I came to understand the intrusion faced by almost always innocent passengers, but the cri9cal importance of the na9onal security framework in which we all travel. In sea ports and on ferries, I became conscious of the porous and fragile nature of our border controls. At huge freight terminals, I saw the opportuni9es for terrorist and other seriously criminal acts with the poten9al for irreparable public damage, and the subtlety required to meet those challenges in a propor9onate as well as strictly lawful fashion.” As part of a series of protec9ve measures in

Issue 1 - 2013

UPDATE

Border control

Counter Terror Solutions for an Evolving World

Counter Terror Expo 2013 is the largest international event to mitigate threats, protect against terrorist attacks and understand current modern day risks in a secure environment. Discover solutions to protect against threats for: Police, Emergency Services, Government, Military, Intelligence & Security Services, Private Sector, Large scale sites, Oil & Gas, Cyber, Maritime/AntiPiracy and Critical National Infrastructure.

• • • • • • • • • •

A-Z of modern counter terrorism solutions 9000+international attendees 400+ exhibitors 4 conference streams 17 show floor workshops Closed door and secure briefings 200+VIP and International delegations Meet the Buyer Programme Networking Opportunities Brand new show features to protect against current security risks

If you’re involved in security & counter-terrorism then register today to protect against the terrorist threat.

www.counterterrorexpo.com/investigator

Co-Located with

Lead Media Partner

Supported By

SAMI www.seasecurity.org

There were three key findings from the review which included; • A need for a new ‘risk-based’ strategic framework to reduce vulnerability of crowded places • Focused effort on reducing the vulnerability of the highest risk crowded places by working with private and public sector partners at a local level • New efforts to ‘design in’ counter terrorism security measures are needed, building on good prac9ce from crime preven9on. The recommenda9ons from Lord West’s review were accepted by the Prime Minister and their full implementa9on con9nues to be a work in progress for UK port and border security authori9es. These security measures quite rightly focused upon the determined threat from contemporary interna9onal terrorists wishing to expose and exploit vulnerabili9es in border security. Yet there are numerous hazards for ports prac99oners to counter which directly impact upon na9onal security, the most pressing being the threats from serious and organised crime. Globally, the United Na9ons es9mates that the most powerful interna9onal organized crime syndicates each accumulate in the region of $1.5 billion a year. The interna9onal drugs market alone is es9mated to be worth £200 billion and the UK’s Na9onal Security Strategy also notes that cyber crime has been es9mated to cost up to $1 trillion per year globally. While the laundering of criminal cash and the importa9on of drugs are key challenges for security forces engaged in the protec9on of

www.the-investigator.co.uk

UPDATE

2007, Prime Minister Gordon Brown asked Lord West, then Minister for Homeland Security and Counter-Terrorism, to conduct a review of UK security speciﬁcally focusing upon the protec9on of strategic infrastructure, sta9ons, ports and airports and other crowded places.

ports and borders, the trafficking of human beings remains a primary concern to government’s and is a serious crime which demeans the value of human life. Human Trafficking, the acquisi9on of people through the use of force, coercion, decep9on, through debt bondage or other means with the aim of exploi9ng them. Men, women and children can fall into the hands of traffickers either in their own countries or abroad. Trafficking occurs both across borders and within a country; it is not always visible – exploita9ve situa9ons are frequently covert and not easily detectable and include the exploita9on for pros9tu9on, forced labour or services, slavery or prac9ces similar to slavery, servitude or removal of organs. Sadly, children are amongst the most vulnerable vic9ms of this increasingly organised crime. Some9mes they are sold by family members or families are in debt bondage to traffickers and their children are put into forced labour or domes9c work where they are vulnerable to sexual or physical abuse. Children may be abducted, or handed over by their parents in the belief that they may have a be:er life and access to educa9on. Children are also vulnerable to being used in criminal enterprises, working in cannabis farms or pick-pocke9ng gangs. Some are unaccompanied asylum-seeking children who can be preyed upon by those who exploit

Issue 1 - 2013

UPDATE

them to enable others to acquire state benefits. Security forces at ports con9nue to tackle human trafficking through preven9on and disrup9on mechanisms achieved by dismantling criminal networks, construc9ng robust prosecu9on cases and confisca9ng assets which are the proceeds of crime. The diverse range of security challenges encountered at borders requires a dedicated and determined response, however, the passage through security at ports screening also provides significant opportuni9es for authori9es to lawfully gather intelligence and evidence. The increasingly commercialised and economically driven focus of ports of entry provides a challenging environment for law enforcement and intelligence agency prac99oners to operate and all in authority

must never forget that the safety of the travelling public and the wider security of its ci9zens must con9nue to take precedence at all 9mes. The development of a strong, united and resilient border, with agencies, businesses and governments working together, shall ensure increased security for all. New threats shall no doubt emerge in future and those intent upon defea9ng security measures at borders will con9nue to create new and innova9ve solu9ons to carry out their unlawful ac9vi9es. The protec9on of UK borders con9nues to remain our ﬁrst and last line of na9onal security defence. Author: Andrew Staniforth, Detec0ve Inspector, North East Counter Terrorism Unit and Senior Research Fellow, Centre of excellence for terrorism, resilience, intelligence and organised crime research (CENTRIC)

Investigation Jobs

The brand new recruitment website for all investigators www.investigationjobs.co.uk To advertise your position call: 0203 119 3351 or email: info@investigationjobs.co.uk

Issue 1 - 2013

www.the-investigator.co.uk

FRAUD

Criminal Beneﬁts

n Essex woman was convicted of a series of wide scale beneﬁt fraud including claiming for a dead child. Counter fraud specialist Ian Allcock reports on this extraordinary case.

I have been a Counter Fraud Specialist for over twenty years, specialising in protec9ng the public purse and since jumping into selfemployment ten years ago I have worked for many clients in all four corners of the UK, mainly in the areas of Benefit, Tenancy and Corporate Fraud and usually my clients are Local Councils. Very rarely does anything surprise me anymore, or at least I thought not…… It was whilst working in Essex as a Counter Fraud Consultant for Thurrock Council in 2009 a case dropped on my desk which appeared fairly low priority at first. Nicola Burridge had claimed Housing and Council Tax Benefit for an address in Grays, Essex since 2004, sta9ng she was receiving Income Support for herself and her children and that she rented her street house in a nice suburban terraced loca9on from a lady in

www.the-investigator.co.uk

London called Elizabeth Te:eh. A colleague in the Council Tax Team had been passed informa9on which suggested Burridge’s property was not occupied by her and her family but rather by a succession of people on what appeared to neighbours to be short term mul9ple occupants. That’s how the case came to me. Now, where to start? I put together an ini9al inves9ga9on plan and went about the usual intelligence checks. The exemp9on provided by Sect 29(3) of the Data Protec9on Act as well as the more specific Social Security Administra9on Act provide cer9fied inves9gators such as myself with access to informa9on from all manor of sources from u9lity and phone companies, credit providers, banks and financial ins9tu9ons and many many more. Add to this access (where jus9fied) to informa9on held by service partners such as Police, Department for Work and Pensions, HMRC and UKBA, then you can see we have a good base from which to start. As the inves9ga9on progressed the more intelligence I gathered the more I felt I was

Issue 1 - 2013

FRAUD

missing something and no amount of head banging and hand wringing could tease the missing needle out of this par9cular haystack of informa9on in front of me. Then, just as I was giving up all hope, as well as ques9oning my own ability (and sanity!) I finally got a bit of a break…… Several alterna9ve names were coming to light through financial checks on bank accounts and one of those was Nicola Copeland. When I ran various checks I found that Nicola Copeland had actually died as a child in Central London during the 1960’s and her grave was just around the corner to where Elizabeth Te:eh lived. This was a significant breakthrough, as it proved the people I was inves9ga9ng were definitely capable of a certain level of dishonesty. So, convinced I was on the right track, and given an amazing vote of confidence by my then gaffer and colleagues, I then planned, directed and mounted a number of surveillance opera9ons. Burridge was now claiming Job Seekers Allowance and so ini9al observa9ons saw her sign on at Grays Job Centre, iden9fying her and her vehicle. Late night car journeys in London then showed the car Burridge had used for her Grays sign on trips was parked outside Te:eh’s address, more confirma9on that they were one and the same person. Checks showed that Te:eh herself was claiming Income Support, Housing and Council Tax Benefit in her own right in London (Yes Really!) Further observa9ons saw a team of Council and DWP Inves9gators follow Burridge from signing on in Grays to a hairdressers shop in Lea Bridge Road, Walthamstow. The owner of the salon confirmed he had let the premises to an Elizabeth Burridge (see what she did there?) in 2006 on a nine-year lease. He confirmed she ran the business on her own. Signage on the shop gave me a telephone number, which

was a mobile number she had provided to the Department for Word and Pensions in Burridge's claim for Income Support. Right, now what? Ok, so this was ge;ng bigger than I thought by the day as I discovered several other proper9es in London which had been obtained using ahem, ques9onable mortgages in several names which all linked back to Te:eh/Burridge. The proper9es had been split into flats and a)er a day of good old gumshoe work I found myself with a fis8ul of signed statements from her tenants iden9fying our alleged fraudster as their landlady. A)er mee9ngs with Essex and Met Police I found myself at 5.30am in Forest Gate Police Sta9on briefing teams of officers and colleagues for four simultaneous searches of proper9es in London and Grays. What a very successful day! The supposed family home in Grays was

Issue 1 - 2013

www.the-investigator.co.uk

I interviewed her three 9mes, mainly No Comment, but she did make certain admissions, she never showed any remorse, typically. The ﬁgures are staggering, ignoring the mortgages (the companies did not want to be involved, probably due to embarrassment), Te:eh had claimed a combined total of £90,549.96 in Housing and Council Tax Beneﬁts, Income Support and Job Seekers Allowance. Even a)er she was charged her arrogance con9nued. In mid January she appeared at Basildon Crown

Court for her trial. She had been charged with 19 offences of fraudulently claiming benefits, 17 of which she admi:ed. The two charges she denied related to the the) of the iden9ty of the deceased child. Being a witness I was called to give evidence and so had travelled down the day before to Essex from my base on Teesside. The morning of the trial she changed her final two pleas to Guilty. A first major result for me in that she had finally admi:ed the enormity of her decep9ons. Sentencing was adjourned for reports and I drove all the way to my current clients offices in Paisley near Glasgow with a smile on my face for the whole six and a half hours! On February 18 2013 Elizabeth Anyele Te1eh of Windsor Court, Walthamstow, London, was sentenced to two years imprisonment and jus0ce for me was most definitely done. Follow Ian on Twi1er: @fraudbloke

Systems Technology Consultants Ltd

Digital Forensic Investigators E X P E RT W I T N E S S S E RV I C E

MOBILE PHONE & TELECOMMUNICATIONS BASED FORENSICS

• Mobile Phone Forensics • Apple iPhone and iPod

• Android Forensics • Cell-Site Analysis

COMPUTER & INTERNET BASED FORENSICS • Computer Forensics • Internet Forensics • Penetration Testing

• Digital Forensics • Identity Theft • Intrusion Detection • Network Forensics • Social Networking Analysis

MEDIA BASED FORENSICS

• Audio and Video • Digital Camera Forensics • Gaming Console Forensics • Memory Card Forensics • Personal Electronic Devices • Tracking Device Forensics

• MP3 Forensics • Satellite Forensics

Systems Technology Consultants Limited

PO Box 3471, Stoke on Trent, ST4 9JS, UK Tel: +44 (0) 1782 286 300 Fax: +44 (0) 1782 280 036 DX: 20707 Hanley E: investigator@sytech-consultants.com

www.the-investigator.co.uk

Issue 1 - 2013

FRAUD

unoccupied and had been split into ﬂats and obviously let out, the hairdressers and the second house in Newham yielded bags and bags of evidence tying the iden99es together. The jewel in this par9cular crown was the arrest of Te:eh at her Waltamstow (Housing Associa9on owned) ﬂat, where we also found a mountain of evidence poin9ng to the frauds commi:ed.