A reference database of Windows artifacts for file-wiping tool execution analysis

Anti-forensic technology can play an effective role in protecting information, but it can make forensic investigations difficult. Specifically, file-wiping permanently erases evidence, making it challenging for investigators to determine whether a file ever existed and prolonging the investigation process. To address this issue, forensic researchers have studied anti-forensic techniques that detect file-wiping activities. Many previous studies have focused on the effects of file-wiping tools on $MFT, $LogFile, and $DATA, rather than on Windows artifacts. Additionally, previous studies that have examined Windows artifacts have considered different artifacts, making it difficult to study them in a comprehensive manner. To address this, we focused on analyzing traces in 13 Windows artifacts of 10 file-wiping tools' operations in the Windows operating system comprehensively. For our experiments, we installed each file-wiping tool on separate virtual machines and checked the traces that the tools left behind in each artifact. We then organized the results in a database format. Our analysis revealed that most of the tools left traces on other artifacts, except for JumpList, Open&SavePidlMRU, and lnk. There were also some cases where traces remained on the other three artifacts. Based on our research, forensic investigators can quickly identify whether a file-wiping tool has been used, and it can assist in decision-making for evidence collection and forensic triage.     

颅骨三维模型制作和数据库的构建

目的采用激光扫描深度图像法和CT影像法,制作颅骨模型,并建立无身源颅骨模型数据库。方法收集各省(区)送检的59例无身源颅骨样本,采用三维激光扫描仪进行颅骨深度图像的采集;采用多排螺旋CT进行颅骨断层影像数据的采集。分别经处理后建立颅骨三维模型。利用3D打印技术实现数字颅骨模型的实体复制。建立具有颅骨信息查询和三维模型显示的无身源颅骨模型数据库。结果采用深度图像法可以获得颅骨的外表面模型,且通过调整扫描仪的参数使细节特征更清晰。采用CT断层影像法可以重建颅骨的内、外部结构,且对于牙齿具有更好的重建结果。建立数据库并将59例无身源颅骨样本信息和三维模型纳入数据库。结论三维建模和3D打印技术可实现对颅骨的重建和模型复制。无身源颅骨数据库的构建,可实现存储和管理颅骨样本的各类信息和三维数据,有助于查询和信息共享,对法医学实践有积极的应用价值。     

论DNA技术在打击多发性侵财犯罪中的拓展应用

目前DNA技术在侦破凶杀、强奸等重大案件中已成为常规的突破方法,但在发案率高,打防难度大的各类侵财型案件侦破中应用还较少,生物物证的提取意识也较差。近年来,英美等发达国家非常重视DNA技术在侦破多发性侵财案件中的拓展应用并取得了很好的效果。应借鉴国外的成功经验,着力消除当前实际工作中制约DNA充分发挥作用的各种不利因素,在多发性侵财案件侦破中充分利用DNA技术高个体识别力和高灵敏度的优势来提高侦破效率,使DNA技术真正成为侵财型案件新的破案增长点。     

mtDNA技术及其在诉讼和事故调查中的应用

本文系统编译整理了线粒体及线粒体 DNA(mtDNA)技术。mtDNA 技术对刑侦、刑事审判与辩护、重大灾害事故调查和民事诉讼以及战争阵亡者母系血统关系认定具有广泛的作用。执法人员、刑事被告人、民事诉讼参与人了解 mtDNA 技术与 DNA 指纹技术的区别才能有效地利用 mtDNA 技术,避免错案和合法权益受到损害。     

镜面遗留指印消除重影及固定的新方法

对镜面上遗留的指印采用280B-4型比对投影仪,进行消除重影并利用透射复印法进行固定做了探讨,同时拓宽了280B-4型比对投影仪的应用范围.     

从数字资源开发看公安特色数据库的建设与发展

公安文献信息数字资源主要来自公安机关、院校、协会等建立的特色数据库;建设特色数据库应全面掌握公安业务信息,深入了解公安学科专业设置状况,在与其它公安院校合作的基础上,建立起具有鲜明学科、专业特色的数据库体系,以便更好地为用户提供高质量的专业化服务。     

Carbon‐Based Fingerprint Powder as a One‐Step Development and Matrix Application for High‐Resolution Mass Spectrometry Imaging of Latent Fingerprints

Carbon‐based materials are often used as matrices for matrix‐assisted laser desorption/ionization mass spectrometry (MALDI‐MS) and its imaging (MALDI‐MSI). However, researchers have refrained from using carbon‐based fingerprint powder (CFP) as a matrix due to high background and contamination. In this work, the compatibility of CFP is reevaluated with MALDI‐MSI using a high‐resolution mass spectrometer (HRMS) and compared to traditional organic matrices. Relevant fingerprint compounds were easily distinguished from carbon cluster peaks when using HRMS. For fair comparison, half of a fingerprint was dusted with CFP while the other half was dusted with traditional organic matrices. All compounds studied had comparable, or higher, signal‐to‐noise (S/N) ratios when CFP was used as the matrix. Additionally, chemical image qualities closely followed the trend of S/N ratios. CFP proved to be an effective one‐step development and matrix application technique for MALDI‐MSI of latent fingerprints, when carbon cluster peaks are well separated by a HRMS.     

Comparison of Rehydration Techniques for Fingerprinting the Deceased after Mummification

Postmortem decay causes fingertip decomposition, desiccation, shriveling, and rigidity, reducing the possibility of obtaining sufficiently clear fingerprints for identification. In this study, five rehydration solutions (ammonium hydroxide, sodium carbonate, potassium hydroxide, urea, and warm water) followed by three fingerprint recording methods (photograph, inking roll, and dusting tape) were investigated to process mummified fingertips from an unidentified cadaver. The results show that sodium carbonate treatment is the most effective for minutiae restoration, followed by ammonium hydroxide treatment. This study also demonstrates that even those fingertips that previously failed in urea solution, 1% potassium hydroxide solution, and warm water treatment could be further improved with sodium carbonate solution to obtain qualified minutiae for fingerprint matching. The optimal procedure is rehydrating the desiccated fingertips with sodium carbonate solution for 24 h followed by dusting the finger and transferring the print to adhesive tape.     

Fingerprint Change: Not Visible,But Tangible

Hand–foot syndrome, a chemotherapy‐induced cutaneous toxicity, can cause an alteration in fingerprints causing a setback for cancer patients due to the occurrence of false rejections. A colon cancer patient was fingerprinted after not having been able to use fingerprint recognition devices after 6 months of adjuvant chemotherapy. The fingerprint images were digitally processed to improve fingerprint definition without altering the papillary design. No evidence of skin toxicity was present. Two months later, the situation returned to normal. The fingerprint evaluation conducted on 15 identification points highlighted the quantitative and qualitative fingerprint alteration details detected after the end of chemotherapy and 2 months later. Fingerprint alteration during chemotherapy has been reported, but to our knowledge, this particular case is the first ever reported without evident clinical signs. Alternative fingerprint identification methods as well as improved biometric identification systems are needed in case of unexpected situations.     

Moistened hands do not necessarily allude to high quality fingerprints: the relationship between palmar moisture and fingerprint donorship

We explored the quality distribution of ninhydrin-developed prints on A4 bond paper in two groups of individuals, in Israel and in India. While the quality distributions of the developed marks in both countries had some dissimilarities, both groups showed the expected bell-shape distribution, with the majority of the donors belonging to the central zone, defined as "average" or "good." Attempt was made to correlate between a physiological feature, palmar moisture, and the fingerprint donorship. As a rule, high fingermark quality could be associated with sweating hands, but there were individuals with moist palms whose fingermarks had a low score and vice versa. This finding supports the logical but hitherto unproven assumption that besides the amount of palmar sweat, the other physiological factor governing the prints' quality is the total amount of substrate, amino acids in this case, in the latent deposits, which depends on the substrate concentration in the sweat.