Chapter 10
Violent Crime and Digital Evidence
On completion of this chapter, the student will:
Be aware that violent crime does not occur in an evidentiary vacuum. Recognize the role
Recognize that mobile devices are a potential source of digital evidence.
Recognize that personal computers are a potential source of digital evidence.
Be aware that private networks usually contain a higher concentration of digital
evidence.
Be aware that network administrators may not be motivated to provide access or
assistance.
Be aware that enterprise systems may be used by offenders to gain information about
victims.
have more than one interpretation.
Recognize that the study of the victims of
valuable insights to the investigation.
To date, there are huge amounts of informati
lives stored on computers, mobile devices, corporate computers, and the Internet. This vast
store of information can show where victims of violent offenders were, and what they were
doing, when the attack occurred. Digital evidence may reveal investigative leads, likely
suspects, previously unknown crimes, and personal information that puts the victim at risk.
Multiple Choice Questions
1. Every violent crime investigation should incorporate digital evidence because digital
evidence may reveal:
2. How the offender approaches and obtains control of a victim or target is significant
3.
4. When reconstructing evidence surrounding a violent crime, it is generally helpful to:
5. One reason not to put too much trust into t s computers is that:
6. Although crime scenes are typically photographed, it is a good idea to create diagrams of
the crime scene because:
7. Given the scope and consequences of violent crimes, when collecting digital evidence it
is advisable to:
8. When swift action is needed, law enforcement personnel may be permitted to conduct
searches without a warrant. Searches of this kind are permitted under:
9. When processing the digital crime scene in a violent crime investigation it is important to
have ________ to ensure that all digital evidence and findings can hold up under close
scrutiny.
10. The Federal statute that has a provision allowing Internet service providers to disclose
subscriber information to law enforcement in exigent circumstances is:
11. When reconstructing evidence surrounding a violent crime, it is generally helpful to:
12. A thief who has programmed and released a virus to roam a network looking for victim
passwords used for online banking is an example of what offense behavior?
13. The case of a Michigan bank robber requiring tellers to undress so he could photograph
them is an example of:
14. The assessment of the victim as they relate to the offender, the crime scene, the incident,
and the criminal justice system is known as:
15. Computers and mobile devices are treated as _________ crime scenes in violent crime
investigations.
True or False Questions
1. Victimology is the assessment of the offender as he relates to the crime scene, the
incident, and the criminal justice system.
2. The key to any investigation is luck, which has value only when it is properly acted upon.
3. Digital investigators can use information gleaned from many forms of digital evidence to
find likely suspects and develop leads.
4. Data from Internet service providers used by the victim or suspect can help determine
their activities around the time of the crime.
5. Mobile devices may contain information about communications as well as audio or video
recordings relating to an offense.
6. Privately owned networks are usually a poor source of information when investigating
violent crimes.
7. Given the scope and consequences of violent crimes, it is advisable to seek out and
preserve all available digital evidence.
8. When investigating a violent crime, it is important to obtain proper authorization to
examine the primary crime scene; however, secondary crime scenes are typically covered
under that authorization.
9. A Mincey warrant, which is easier to obtain, is an option when investigators really
believe there is some emergency.
10. The investigator reconstruction process involves pulling all evidence together and letting
it speak for itself.
11. When reconstructing evidence surrounding a violent crime, it is helpful to create a
timeline of events from digital evidence.
12. s IT staff, since forensic training is a basic
requirement in most IT departments.
13. Computers and mobile devices are treated as primary crime scenes in violent crime
investigations.
14. When investigating suspects of a violent crime, it is important to look for behaviors that
leave digital traces.
15. What an offender does at a crime scene typically reveals little useful information to
digital investigators.
Essay Questions
Prepare a sample Crime Scene Processing Procedures Field Guide, based on the information
provided in this chapter. The format of this guide should facilitate use at the scene.
Scenario
You have just arrived at the scene of workplace violence where an individual shot his coworker.
Describe, in detail, the steps that you would take to process the digital crime scene.