LESSON FOR WEEK 1
scene investigators, and vice versa. This
AN OVERVIEW
Special Crime Investigation
 deals with the study of major crimes
based on the application of special
investigative technique.
 The study concentrates more on
physical evidence, its collection,
handling, identification and
preservation in coordination with
the crime laboratory.
 It is worthy to note that Special
Crime Investigation involves a close
relationship between the prober in
the field and the crime laboratory
technician. They work together as
a team, reacting to and extending
one another theories and findings
both working patiently and
thoroughly to solve a crime from
their investigative discoveries.
 The present criminal justice system
in our country, the court relies more
on physical evidence rather than
extra-judicial confession.
It is worthy to note that homicide
detectives and crime scene
investigators are two different
professions/ functions, from two
different departments.
In order to become a detective (called
investigator-on-case in the Philippine
setting), you must first be a police
officer and must have undergone rigid
training of crime investigation and
detection.
To become a Crime scene investigator
(CSI) or Scene of the crime operative
(SOCO) in the Philippine setting, you
must be a police officer. However, there
are many departments who train their
police officers and detectives to be crime
depends heavily on geographic location
and needs of a particular agency.
Smaller municipalities may have a
handful of police officers and even fewer
detectives. Some of them are trained to
process crime scenes when needed, but
when a murder case springs up in their
community, they usually utilize other
impartial law enforcement agencies, like
the Crime Laboratory.
Distinction Between a Detective and a Crime Scene
Investigator (CSI)
Crime Scene Investigator: A crime scene
investigator is, more often than not, a member
of law enforcement who is responsible for
identifying,
collecting,
preserving, and
packaging physical evidence
at the scene of a crime. Although it is often
believed that crime scene investigators are
also the professionals performing tests on the
physical evidence, those jobs, in fact, are
reserved for forensic scientists and other
forensic professionals.
A select few crime scene investigators may
also perform laboratory forensic work, although
the majority of crime scene investigators
perform their work at a crime scene, where
they collect everything from firearms and
fingerprints to DNA samples and photographic
evidence.
A crime scene investigator is a rather broad
title, as this professional may be a:
 Crime scene leader
 Crime scene technician
 Forensic photographer
 Forensic sketch artist
  Ballistics expert
 Fingerprint expert
 DNA expert
A Crime Scene Investigator is also responsible
for performing standard physical evidence
collection and preservation duties, while other
CSIs perform more specialized tasks, such as
DNA and latent print recovery. However, in
general, a CSI may be responsible for:
 Working with law enforcement to secure
the scene as to prevent the
contamination of evidence
 Identifying and marking the areas of the
crime scene
 Collecting, preserving, and packaging
the physical evidence
 Maintaining detailed reports, logs and
other tracking data
 Using scientific equipment to collect and
analyze evidence
 Maintaining and repairing scientific
equipment
 Testifying in court with regard to
collected evidence
 Transporting physical evidence to the
forensic laboratory
A crime scene investigator is called upon to
utilize scientific data and technical expertise to:
 Evaluate the crime scene without
destroying evidence
 Develop a plan for collecting physical
evidence
 Ensure evidence is properly
documented
 Ensure evidence is properly collected,
handled, preserved, and transported
A Crime Scene Investigator (CSI) is a
professional who has a thorough knowledge
and a keen understanding of scientific
observation and methods, the criminal justice
system, and how crime scene investigation
merges Science with law.
A crime scene investigator needs to possess
extensive knowledge in the natural sciences,
as well as law enforcement and crime scene
processing. Professional Crime scene
investigators (CSIS) who want to concentrate
their careers in a forensic science specialty,
such as ballistics or DNA, for example, also
often need to acquire additional
education/training.
A Crime Scene Investigator should possess
the ability to cope with difficult situations.
Beyond dealing with a potentially unnerving
crime scene, these professionals must also
possess keen observational and technical skills,
as they are called upon to identify and collect
even the smallest amounts of physical
evidence - evidence that may mean the
difference between an unsolved crime and a
successful conviction.
Crime scene investigators must also be able to
work both independently and as part of an
investigative team. In often-chaotic crime
scene situations, these professionals must be
able to seamlessly complete the job through
effective communication and a strong
understanding and appreciation of accepted
protocol.
Because the job of a CSI also means
constantly learning, these professionals must
be open to being introduced to new skills and
technologies. They must also be organized and
effective at both written and oral
communications.
Finally, CSI professionals must be prepared to
work in less-than-ideal work environments, and
they must be prepared to arrive at the scene of
a crime, regardless of the time of day or night.
A Detective:
 Conducts interview with suspects and
witnesses
 Observe the activities of suspects
 imm warrants and arrests suspects
 Write detailed reports
DEFINITION IN PHILIPPINE SETTINGS
CRIMINAL INVESTIGATOR
A public safety officer who is tasked to conduct
the investigation of all criminal cases as
provided for and embodied under the Revised
Penal Code/Criminal Laws and Special Laws
which are criminal in nature. A well trained,
disciplined and experienced professional in the
field of criminal investigation duties and Calvin Goddard
responsibilities - father of ballistics
- examine bullets using a comparison microscope to
INVESTIGATOR/OFFICER determine whether or not a particular gun fired bullet.
- established the bureau of forensic ballistics in new
Shall refer to any law enforcement personnel
York city along with C. E Waite, Philip O. Gravelle and
belonging to the duly mandated law
enforcement agencies (LEA) tasked to enforce John H. Fisher, which was formed to provide firearms
Republic Act 9208 such as officers, identification services throughout America.
investigators and agents of the Philippine
National Police, National Bureau of
Investigation, Bureau of Immigration.
Alber Osborn
- father of document examination
KNOWN PERSON - work led to the acceptance of documents as scientific
evidence
Mathieu Orfilla - known for founding the American society of question
- father of toxicology document examiners {ASQDE}
- wrote about the detection of poisons and their effects
on animal
- Credited as one of the first people to use microscope
Walter McCrone
to assess blood and semen staines.
- father of microscopic forensics
- developed and applied his microscope technique to
examine evidence
Alphonse Bertillion - most famous analytical work began with his
- father of anthropometry participation in the shroud of turin research project.
- developed a system to distinguish one individual
person from another based on certain body
measurements.
Hans Gross
- replace fingerprints
- father of forensic publications
-Also, inventor of MUGSHOT
- wrote the book on applying different science
disciplines to the field
- he was a professor at a number of schools and taught
Francis Galton the practice of criminal forensic
- father of fingerprinting
- developed to uniquely identify individuals
-created the statistical concept of correlation
Edmond Locard
- developed the Theory of Intelligence
- father of the crime lab
- locards exchange principal every contact leaves trace
- nominated for the French forensic science hall of fame
Leone Lattes of association Quebecoise de criminalistique
- father of bloodstain identification
- developed the procedure for determining the blood
type of dried blood stain
- introduced the idea of forensic paternity, using blood
from relatives to identify the body
LESSON FOR WEEK 2
FORENSIC SCIENCE AS APPLIED TO CRIME
INVESTIGATION
What is Forensic Science?
Forensic Science
 is defined it as "The application of
science to those criminal and civil
laws that are enforced by the police
agencies in a criminal justice
system.
 Forensic Science deals with the
application of the knowledge and
methodology of various disciplines
of science to legal matters.
 It involves the use of multiple
disciplines such as physics,
chemistry, biology. computer
science and engineering for
evidence analysis as well as
Forensic Medicine (Legal Medicine).
For instance, Physics is used to
understand the pattern of a blood spatter,
Biology to establish the source of an
unidentified suspect, Chemistry to
determine the composition of drugs, and
Legal Medicine to establish the cause of
death as well as the manner of death.
Thus, the role of forensic science in
criminal justice and the legal system is
highly critical but is often underrated.
Forensic science, also known
as criminalistics, is the application of
science to criminal and civil laws, mainly
on the criminal side during criminal
investigation, as governed by the legal
standards of admissible evidence and
criminal procedure.
The Role of Forensic Science in Criminal
Investigations
Forensic science
 is that piece without which the puzzle of a
criminal investigation is incomplete.
 Without the application of forensic science,
criminals can never be convicted unless an
eyewitness is present.
While detectives and law enforcement
agencies are involved in the collection of
evidence, be it physical or digital, it is forensic
science that deals with the analysis of those
evidence in order to establish facts admissible
in the court of law.
Thus, in a world devoid of forensic science,
murderers, thieves, drug traffickers and rapists
would be roaming scot-free.
The duties and responsibilities of a forensic
scientist in a criminal investigation is crucial as
it involves the careful examination of an
evidence while ensuring that it is not tampered
with.
A diverse pool of forensic scientists and
forensic tools go into the investigation of a
criminal act.
For instance, forensic pathologists are skilled
at determining the cause of a death by
performing autopsies. An autopsy helps
establish the cause and manner of death
through the examination of body fluids and
tissues.
Forensic Scientists analyze physical evidence
(fingerprints, blood, hair etc.) collected from the
incident scene to identify suspects.
Additionally, forensic professionals use image
modification tools to search for criminals
absconding from the law for a long time.
This tool enables them to digitally age a
photograph to understand how the individual
would look at aging.
Criminal Profiling-Getting inside a criminal's mind
This needs no introduction as we have often
encountered its use in popular television series
such as
 Criminal Minds,
 Law & Order,
 Profiler and the film,
 Silence of the Lambs.
Criminal profiling dates back to 1888 and is
believed to have been originally used and
adapted by the FBI.
Criminal profiling
 enables forensic scientists to zero down on
suspects by determining a criminal's
patterns and personality.
 It is based on a psychological evaluation of
the belongings seized from an offender.
 This helps in drawing a complete social and
psychological assessment of the offender.
Although it is often questioned for its
accuracy, effectiveness and scientific
validity, its role in the criminal investigation
cannot be neglected.
The basic steps of criminal profiling include in-
depth analysis of the crime scene, analyzing
the incidence and drawing comparisons with
similar events in the past, evaluation of the
victim's background and activities, considering
all possible motives and preparing a detailed
description of the suspects in order to compare
it with previous cases.
Importance of Forensic Science in Law
 The word "forensic" has its roots in the Latin
word "forensis" which means a forum.
 Back in early Rome, a forum referred to a
public place where judicial proceedings and
debates were held.
 Thus, the origin and the very definition of
forensic science' points to its close
association with the legal system.
 Forensic Science involves the collection,
preservation, and analysis of evidence
suitable for prosecuting an offender in the
court of law.
 The application of forensic science in the
criminal justice system is, therefore, an
apparent picture.
The legal system widely recognizes the role of
forensic evidence in the trial of criminal
offenders.
This is because when scientific techniques and
methods are used, there is not much scope for
bias or injustice.
That is why DNA profiling, and a host of other
forensic evidence are widely accepted in courts
across the world.
Interestingly, the first forensic technique ever
used to involve finger and palm print
identification dates back to the Chinese (650
A.D.).
Forensic evidence
 is extensively used worldwide to both
convict and exonerate defendants. Thus,
forensic science laboratories have
mushroomed up all over the globe in the
past couple of decades.
 In fact, special acts have been enacted in
the US, Canada, and Australia to improve
the rendering of forensic services.
 This would ensure that crimes are detected
with greater certainty and consequently
conviction rates can increase.
 Such acts place a great emphasis on time-
efficient and quality management of crime
scene.
The Scope of Forensic Science:
The following are the scopes of Forensic
science:
Forensic Biology/DNA
 Apart from fingerprint analysis, DNA
profiling is the other commonly used
forensic technique in criminal investigations.
 DNA being as unique to an individual as
fingerprints, help forensic professionals
identify or confirm an unidentified person, or
to eliminate suspects from a list of accused.
  The biological evidence most commonly
used for DNA profiling include blood, saliva,
semen, skin, urine, and hair. However, DNA
fingerprints are usually never used as the
single piece of evidence in the court of law.
Forensic Odontology:
 Forensic odontology helps in the
identification of victims when the body is left
in an unrecognizable state.
 This is achieved through an examination of
their teeth, the alignment, and overall
structure of the mouth.
 Forensic dentists or odontologists aid in the
comparative identification of a person by
examining the development and anatomy of
the teeth including any restorative dental
corrections such as filling.
 It is often applied to criminal investigations
for bite mark analysis.
Controlled Substances:
 Chemicals that are legally recognized as
having the potential for abuse are called
controlled substances.
 This includes "street drugs" such as ecstasy
or heroin and prescription drugs such as
oxycodone.
 The ability to detect and identify such
controlled substances plays a crucial role in
aiding law enforcement agencies in their
fight against drug abuse and drug-based
violence.
Forensic Toxicology:
 Forensic Toxicology involves analysis of
biological samples to check for the
presence of toxins and drugs.
 This branch of forensic science is of prime
importance in road accidents, poisoning,
sexual violence etc.
 The toxicology reports furnish key
information about the nature of substances
present in an individual pertaining to an
incidence.
 It also determines whether the quantity of
substances are normal as per a therapeutic
dosage or exceed the permissible level.
 Since newer variants of drugs are
developed each day, this branch of forensic
science is ever-evolving and demands up-
to-date approach.
Forensic Anthropology:
 This deals with the examination of
compromised human remains or skeletons
to help determine the age, height, gender,
and ancestry.
 It also helps establish the time since death
by identifying and examining injuries, if any.
 These analyses give valuable leads to
investigators on identifying victims,
especially in cases where the bodies are
beyond recognition.
Forensic Pathology and Medico-Legal
Death Investigation:
 Forensic pathology is a branch of pathology
that helps determine the cause of death by
examining the cadaver.
 Forensic medicine involves the collection
and analysis of medical samples to deduce
facts admissible in the court of law. For
instance, identification of wound patterns
can help determine the weapon used to
inflict the wound.
 Additionally, forensic pathologists can
examine exit and entry wounds in deaths
pertaining to the use of firearms or other
projectiles.
 A forensic pathologist can, therefore, draw
crucial inferences on whether the death is
natural, criminal or accidental.
Impression and Pattern Evidence:
 Impression evidence is the evidence
created when two objects come in contact
with enough force to create an "impression".
This could involve a two-dimensional
impression such as a fingerprint or three-
dimensional one such as the marks on a
bullet.
 Pattern evidence analysis involves
identification and analysis of additional
information within an impression.
Impression and pattern evidence when used
in conjunction can help establish vital links
between a suspect/tool to a crime scene.
Trace Evidence:
 Evidence such as fibers, soil, hair, gunshot
residue, wood, and pollen are some of the
many examples of trace evidence.
  It derives its name from its tendency to be
easily transferrable between objects, people
or the environment during a crime.
 Trace evidence often plays a pivotal role in
establishing a prime link between a suspect
and the victim. For instance, a soil sample
obtained from the shoes of a victim can give
critical clues on the location of the crime
and thus help in tracing the perpetrator.

Cyber Forensics:

 Cyber Forensics involves the analysis of

evidence found in computers and digital
storage media like pen drives, hard disks
etc.
 Its major objective is identifying, preserving,
recovering, analyzing, and presenting facts
and opinions about the digital information.
 Although it is mostly used for the
investigation of cyber crimes, it also widely
used in civil proceedings.

Ballistics:

 Ballistics is a specialized Forensic Science

that deals with the motion, behavior,
dynamics, angular movement and effects of
projectiles, such as bullets, rockets, missiles,
bombs etc.
 The use of ballistics in forensics is mainly in
criminal investigations. For instance, the
examination of the bullet found at a crime
scene can reveal what type of gun was
used to fire it and whether it is associated
with any other crime in the past.
 In fact, ballistic details are documented in a
large database that is accessible by law
enforcement agencies across the globe.
LESSON 3
THE PRINCIPLES OF CRIMINAL
INVESTIGATION AND DETECTION
When is the celebration of the annual
crime prevention?
 The annual crime prevention is
celebrated every 1 week of
September.
What is criminal investigation and
detection?
 Criminal investigation and detection
is both an art and a science;
 a collaboration of common sense,
judgment, intellect, experience and
an innate intuitiveness along with a
grasp of relative technical
knowledge.
Criminal investigation
 is an art which deals with the
identity and location of the offender
and provides evidence of his guilt in
a criminal proceeding.
 Criminal investigation is a
systematic, methodical, and
detailed inquiry and examination of
all components, circumstances, and
relationships pertaining to an
incident.
What is the Objective of a criminal
investigation?
 The objective of a criminal
investigation is to establish the truth
or falsity of a complaint, basing
conclusions on facts derived
through a complete and impartial
investigation.
 In every crime, the establishment
of corpus delicti is essential in
order to prove the guilt of the
accused beyond reasonable
doubt.
 Thus, an investigation can be
successful only if it is conducted in
a methodical and thorough manner.
 An investigator must have at least,
basic knowledge of criminal law,
law on evidence, investigative
principles, case preparation
methods, proper preservation of the
crime scene, and the procedures of
the criminal justice.
Criminal investigation
 is concerned with the general
principles and techniques in crime
investigation, detection and
apprehension of criminal, the
methods obtaining in crime
investigation, interviews and
interrogation and instrumentation,
identification and reproduction of
evidence, searching, sketching and
photographing crime scenes,
application of the basic principles of
criminalities, modus operandi
techniques of surveillance, locating
and apprehending of criminals.
 Specifically, it views the subject as
a two-pronged effort to identify,
locate and arrest the criminal
offender and simultaneously identify,
locate, collect and evaluate the
evidence to convict the offender in
court.
 Fundamentals of criminal
investigation explores the
fundamentals of criminal
investigation as practiced by actual
police officers on the job.
  Theory and practice blend scientific
theories of crime detection with a
practical approach to criminal
investigation.
 The role of criminal investigator
emphasizes the role of criminal
investigation as a law enforcement
responsibility that must be
conducted within the framework of
the constitution and the existing
legal procedures.
 Criminal investigation and detection
is both an art and a science; a
collaboration of common sense,
judgment, intellect, experience and
an innate intuitiveness along with a
grasp of relative technical
knowledge.
 Basic is the rule that in order to
effectively conduct or perform
criminal investigative functions, one
must understand the basic
definition of; investigation and
investigate.
An investigation
 is an examination, a study, a survey
and research of facts and/or
circumstances, situations, incidents
and scenarios, either related or not,
for the purpose of rendering a
conclusion of proof.
 When one investigates, he/she
makes a systematic inquiry, closely
analyzes and inspects while
dissecting and scrutinizing
information.
 An investigation, therefore, is based
upon a complete and whole
evaluation and not conjecture,
speculation or supposition.
Law Enforcement
 the entity charged with the
responsibility to accurately close
the gap between fact and fiction,
detects and prevents criminal acts;
and in doing so are mandated to
function within strict administrative
and legal parameters.
 It is true that one must understand
the basic definitions, however, the
scope of the criminal investigator
reaches far beyond that of mere
definitions.
 Since crime detection and
investigation is both an art and a
science; a collaboration of common
sense, judgment, intellect,
experience and an innate
intuitiveness along with a grasp of
relative technical knowledge, the
criminal investigator must
continually apply those skills,
acquired through study and
experience, to the examination and
observation of the criminal and his
behavior, as well as his social and
physical environment.
When the most basic functions of Law
Enforcement such as:
 the preservation of life, the
protection of property and the
maintenance of peace, are not
substantially realized, the
investigative process must then be
undertaken.
The aim of the investigative process is
twofold;
 first, the investigator will attempt to
identify and safely apprehend the
violator.
 secondly, produce him/her before a
proper court of law. Of course,
there is much going on behind the
 scenes, so to speak, while
attempting to achieve these not so
simple objectives; identification,
apprehension and prosecution.
 Criminal investigations are
conducted primarily for the
prevention of crimes.
 When crimes occur, Law
Enforcement is responsible to the
community it serves and must
discharge its duty by immediately
investigating such incidents. Ideally
the investigation will cause the
violator to appear before a court so
as to answer for his/ her behavior.
 Ultimately and probably most
important, is that the investigation,
detection and apprehension of the
criminal, effectually serves to curtail
recidivism thereby reducing overall
crime.
There are several basic types of
investigations that Law Enforcement
personnel may undertake in the routine
discharge of their duties, among of which
are but not limited to:
1. Investigations of incidents, which
are violations of laws and/or
ordinances that include criminal
acts (robbery, assaults, larceny,
burglary, murder, illegal weapons,
etc...) and traffic accident
investigations (serious injuries,
likely to die, property damage).
2. Personnel investigations into the
background, character and
suitability of persons in an effort to
determine their eligibility for
positions of public trust.
CRIMINAL INTELLIGENCE
What is Criminal Intelligence?
Criminal Intelligence
 is information compiled, analyzed, and/or
disseminated in an effort to anticipate,
prevent, or monitor criminal activity.
 The United States Army Military Police
Corps defines criminal intelligence in more
detail;
 criminal intelligence is information
gathered or collated, analyzed,
recorded/reported and disseminated by law
enforcement agencies concerning types of
crime, identified criminals and known or
suspected criminal groups.
 It is particularly useful when dealing with
organized crime.
 Criminal intelligence is developed by using
surveillance, informants, interrogation, and
research, or may be just picked up on the
"street" by individual police officers.
Some larger law enforcement agencies have a
department, division or section specifically
designed to gather disparate pieces of
information and develop criminal intelligence.
One of the most effective ways of applying
criminal intelligence is first to record it (store in
a computer system) which can be mined.
(searched) for specific information.
CRIMINAL INVESTIGATOR
Criminal Investigator defined:
Criminal investigator is the person who is
charged objectives of investigation carrying the
with the duty of such as:
 To identify the criminal;
 To locate the offender; and
 To provide evidence for the offender's
guilt.
Qualities of an effective investigator
To be an effective investigator, he/she must
possess the following qualities:
a. Perseverance with endurance
b. Intelligence and wisdom of Solomon TOOLS OF INVESTIGATION
Three (3) tools of Investigation:
c. Honesty, Integrity/ incorruptible
1. Information
d. Understanding of the people and
environment. 2. Interrogation or interview

e. Keep power description. of observation and 3. Instrumentation

accurate
f. Knowledgeable about the laws on crimes,
evidence, arrest, investigative
concept/techniques, scientific aids, laboratory
services, and about the criminals and their
modus operandi.
g. Keen power of observation and description.
h. Mastery in the oral and written
communication.
What is Information?
Information is the knowledge which the
investigator gathered and acquired from other
persons.
Classifications of information:
1. information from regular sources such as
records and files of the police, company
records, civic spirited citizens; and

i. The power to read between the lines. 2. information from cultivated sources such
as paid informants, bartenders, cab drivers.
PHASES OF CRIMINAL INVESTIGATION
The following Investigation are the phases
of Criminal:

1. Identification of the offender

2. Tracing and locating the offender

3. Gathering of evidence to prove the guilt of

the accused.

Basic Elements of Investigation Process

The basic elements of investigation
process are:

 Recognition is the
identification/recognition
 Collection- is the act of gathering
relevant information from possible
sources aside from the crime scene.
 Preservation- is an act of ensuring the
physical and legal integrity or the
credibility of the information or pieces of
evidences gathered.
 Evaluation- is the determination of the
merit or the worth of the information or
evidences to prosecute the suspect.
LESSON 4
INITIAL RESPONSE TO THE CRIME SCENE
(“THE GOLDEN HOUR”)
FIRST RESPONDER
The four main tasks of the first officer on the
scene are:
 To give first aid;
 To apprehend the suspected offender;
 To protect and if necessary collect and
preserve evidence; and
 To cordon off and protect the area.
First Officer on The Scene
a. Give first aid. Immediately request for
assistance from medical experts.
b. Decide whether a crime has been committed.
c. Apprehend the suspected offender. Take
into account possible entry points, route of
escape or hiding place of perpetrator.
d. Write down the names of all the persons at
the crime scene and where they can be
contacted in the next few hours. Remove them
from the scene.
e. Do not let anyone enter the crime scene
area. This applies to police officers too unless
they have some special reason for being there.
Exception: First aid measures.
f. Inform the police officer responsible for
deciding (COP/PD) on who is to carry out the
investigation and call in reinforcements to the
scene.
g. If shots have been fired, secure any
evidence of primer particles (gunpowder
residue) on the hands.
h. If any person has been taken to hospital,
see to it that a police officer is sent to the
hospital to take the necessary measures.
i. Cordon off a sufficiently large area around
the crime scene while waiting for
reinforcements.
j. Protect the crime scene from alteration.
k. Make a note of the measures that are taken
and the persons who enter the crime scene.
Also make a note of the times of important
events and observations.
l. Photograph and if appropriate video record
the crime scene and the adjacent area,
including people hanging around the scene.
m. The First Responder shall be responsible
for the control of the crime scene until the
arrival of the designated investigator-on-case
who shall thereafter assume responsibility of
the crime scene.
LIFE-SAVING MEASURES
Life-saving measures
 Life-saving measures must be taken
immediately if there are any signs of life on
any of the victims and/or suspects. This
must be done even if a crime is suspected
and the measures lead to loss of evidence.
 Apprehend the suspected perpetrator
 In the case of a recent incident, measures
must be taken to apprehend the perpetrator
if possible. All the people at the crime scene
should initially be asked for any information
that may be of help.
 If information is forthcoming in the form of
description, escape route etc. action should
be taken accordingly and the information
passed on to the local or regional operation
centers. It should always be borne in mind
that persons at the crime scene who
claim to be witnesses may in fact be
involved in the incident itself.
CRIME SCENE SECURITY AND PRESERVATION
Crime Scene Security and Preservation
Protect and collect evidence
 The main duty of the first responder is, after
giving first aid if necessary, to protect the
scene.
  Protecting and collecting trace evidence
involves a number of different measures
that will vary from one scene to another.
 The first responder should primarily protect
the crime scene and preserve evidence and,
secondly, collect evidence that might
otherwise be destroyed.
 One important measure when it comes to
ensuring that evidence is not lost is to avoid
contamination.
Avoid contamination
 When two objects come into contact there is
always a risk of contamination, i.e.
exchange of materials between them. The
objects do not even have to be in contact,
since materials such as fibers and hair may
be suspended in the air.
 The best way of avoiding contamination at
the initial stage is to leave the crime scene
untouched.
 The persons involved, for example victim
and suspect, must on no account be
allowed to enter the crime scene and
must always be kept apart. Such persons
should be dealt with by different police
officers and transported in different vehicles.
 If it is necessary to recover something at the
crime scene, this must always be done by
an officer who has not been in contact with
the persons involved.
Contamination must be avoided throughout
the material handling chain, from collection
at the crime scene to the examination in the
laboratory.
The following rules should be followed to avoid
contamination:
 Never let suspects and victims be in the
same room or be transported in the
same car (not even at different times).
 Use protective clothing (overalls, caps,
gloves and disposable shoe coverings)
when entering a crime scene and
collecting trace evidence (hair, fibers,
blood, secretions, small particles etc.).
 Plan out the gathering of on-scene
evidence such that each specific source
is handled separately, if possible. As
such, one person should carry out the
crime scene investigation; another
should examine the suspect's clothes,
car etc., a third- the suspect himself, a
fourth- the victim, etc.
 Cars should preferably be examined on
site.
 If a car must be moved, it should be
towed. Avoid using the seats. If that is
unavoidable, use protective clothing. If
the car must be driven, the only person
in it should be the driver, who should
wear protective clothing. A list of the
clothes worn by the driver should be
given to the investigating officer.
Cordons
 The purpose of cordons is to make sure that
unauthorized persons do not enter the crime
scene. Guarded cordons are always the
best. The area should be cordoned off with
tape or rope and warning signs should be
put up. Make sure that the cordoned off
area is sufficiently large. (It is better if the
area is sufficiently large).
Witnesses
 Do not allow witnesses or suspects to return
to or enter the crime scene. Persons at the
scene who are to be questioned should be
taken to separate premises in the vicinity
and kept apart from each other, since they
may, for example, have valuable information
or evidence on their bodies that must be
transmitted to other persons.
Persons taken to hospital
 If any involved person (suspect or victim)
has been taken to hospital, a police officer
should go the hospital immediately and take
the following measures:
 Seize/retrieve the person's clothes and
put all pieces of clothing in a separate
paper bag properly marked as to the
time/date and place of retrieval, and
description of contents.
 If the clothes have been taken off,
question the hospital staff on who took
off the person's clothes and what has
been done with them.
 Make sure that all trace evidence on
victim or suspect are collected and
preserved.
 Make sure that suspects and victims are
subjected for alcohol and drug test.
 If shots have been fired, request the
PNP Crime Laboratory to conduct
paraffin test in order to collect primer
particles/gunpowder residue from the
person's hands.

Checklist for Initial Action of First

Responders

LESSON 5
PART II- INITIAL INVESTIGATION (“THE
GOLDEN HOUR”)
INITIAL INVESTIGATION GUIDE
Initial Phase of Investigation
 The initial phase or the first 72 hours
(“Golden Hour”) of a major case such as
murder or kidnapping/abduction
investigation (crimes of violence
investigation) is crucial. Since murder,
homicide and kidnapping/abduction are
considered as either heinous or sensational,
the investigator-on-case shall immediately
request for technical assistance of the
SOCO Team from the local PNP Crime
Laboratory Office thru the City/Provincial
Office Tactical Operation Center (TOC).
 In instances where the investigator-on-case
must collect the evidence himself as when it
is about to be destroyed or contaminated,
he should similarly be guided by the
checklist as contained in Chapter 6 of this
Manual.
Only duly trained investigators can process
the crime scene.
 Upon arrival at the crime scene the
Investigator-on-Case makes a general
assessment of the scene, takes a
cautious walk-through, jots downs notes to
extensively document/record important
factors and establishes the evidence most
likely to be encountered.
 He then defines the extent of the search
area, and determines personnel,
organization and equipment needed to
make specific assignments. From his
assessment, he develops a general theory
of the crime scene to set his plan in motion.
The investigator needs speedy and continuous
reports on the incident as well as on the results
and course of determined actions.
There are a lot of initial information to be
clarified and assessed in order to survey the
situation and to create bases for priorities and
directions:
a. When, where and why did it happen?
b. Who is the victim?
c. Possible motive/s?
d. How did the perpetrator gain entry into the
crime scene and how did he flee the scene?
When?
e. Is the perpetrator to be found among a
selected few?
f. Could any specific individual be suspected?
Why?
g. Is there a description of the perpetrators?
Accomplices?
h. Is there any information on vehicles used?
i. Is there anything missing from the crime
scene or from the victim?
j. Did the perpetrator leave anything behind
through which he could be traced?
k. Are there any other incidents, occurrences,
circumstances or observations
that could be connected with the crime?
l. Determine if the particular area is the primary
crime scene or is it just the
finding place and the crime happened in some
other place? If so, secure the
primary crime scene.
CHECKLIST PROCEDURES AT THE CRIME
SCENE
Checklist of Procedures at the Crime Scene
First Responder
 Save and preserve life. Immediately
request support from medical experts.
 Provide emergency first aid for those
injured at the scene and evacuate them
to hospital.
  Prepare to take the “Dying Declaration”
of severely injured person if any.
 Arrest, detain, and remove any suspect
present, if more than one (1), isolate
them.
 Cordon the area to secure and preserve
the crime scene.
 Prevent entry of persons into the
cordoned area.
 Record information gathered and the
arrival time.
 Conduct preliminary interview of
witnesses to determine what and how
crime was committed.
 Prepare to brief the investigator on the
initial data gathered upon his arrival.
 Turn-over the crime scene to
investigator-on-case
Investigator-on-Case (IOC)
 Assume responsibility over the crime
scene upon arrival.
 Conduct assessment of the crime scene
 Organize and establish the On-Scene
Command Post (OSCP)
 Conduct interviews and gather
information. Jot down important facts
and maintain record
 Conduct Crime Scene Investigation.
Look for other witnesses
 Request for technical assistance in
crime scene processing fm CL SOCO
thru the TOC
 Brief the SOCO Team Leader (TL) on
the initial information gathered about the
crime incident.
 Documentation (Photography, Sketching
note taking, videography)
 Collection handling of evidence by
SOCO or Forensic Investigator
 Evaluate evidence and interrogation
results at the Crime Scene
 Custody and Transport of pieces of
evidence by designated Evidence
Custodian
 Request laboratory examination of
evidence as necessary
 Examination of the recovered physical
evidence by PNP Crime Laboratory
SOCO
 Ensure that appropriate inventory is
maintained and provided.
 Release or lifting of the cordon at the
crime scene is accomplished only after
completion of the final survey and
proper documentation.
 Release of the crime scene shall be in
writing with the notion that there is only
one chance to perform the job correctly
and completely.
SOCO Team of Crime Laboratory / Forensic
Investigator
 Coordinate with the Investigator-on-case
(IOC)
 Require written request for SOCO from
the Investigator-on-case
 Preparation prior to the conduct of
SOCO
 Crime Scene approach
 Preliminary Crime Scene Survey by the
SOCO Team Leader with Investigator-
on-case
 Narrative description of the Crime
Scene
 Crime scene photography/videography
 Sketch of Crime Scene
 Detailed Crime Scene Search
 Physical evidence recording and
collection
 Collection and evaluation of physical
evidence with the IOC
 Brief the investigator-on-case on the
result of the SOCO (for possible
operational use).
 Final Crime Scene Survey by the
Investigator-on-case and SOCO Team
Leader
 Submit result of SOCO/Inventory of
seized evidence to Investigator-on-case.
 Certify conclusion of SOCO and lifting of
cordon by the IOC.
INVESTIGATOR'S CHECKLIST
INVESTIGATION CHECKLIST
 Upon arrival at the crime scene the
Investigator-on-Case makes a general
assessment of the scene, takes a cautious
walk-through, jots downs notes to
extensively document/record important
factors and establishes the evidence most
likely to be encountered.
  He then defines the extent of the search arrival, get all available information from the
area, and determines personnel, first officer on the scene and other police
organization and equipment needed to officers who are there.
make specific assignments.
 From his assessment, he develops a
b. Overview. Get your bearings at the crime
general theory of the crime scene to set his
plan in motion.
scene to get a rough picture of the area and
what happened.
 Section 2.2.8 of the PNP Criminal
Investigation Manual provides that the c. Start keeping an action log.
Scene of Crime Operation (SOCO)
specialists of the Crime Laboratory shall be d. Cordon off the area or extend the existing
requested in cases where the crime scene cordon if necessary. The perpetrator‟s route to
needs special processing due to its and from the scene may need to be cordoned
significance or because of its sensational off as well.
nature.
e. Make sure that the responsible police officer
 A crime of violence is a significant posts the necessary guards for the cordoned
/sensational case and shall therefore
off area.
require the services of the SOCO Team.
 The investigator-on-case must, however,
remain at all times responsible for and in- f. Make sure that a list is made of the people
charge of the crime scene and shall always who enter the crime scene.
be present during the whole SOCO
operations to provide the necessary support g. If shots have been fired, find out whether
as well as oversee the processing. gunpowder residue/primer particles have been
 The investigator-on-case shall conduct collected from the hands of persons involved. If
interviews and gather as much information not, request PNP crime Laboratory to do so at
as he can at the crime scene. once.
 This information could be critical in guiding
the SOCO Team on which areas to focus on
h. Take a general photograph of the crime
the collection of forensic evidence.
scene. Film the scene with a video camera.
 It is also imperative that whenever a crime
of violence or any other major or i. Pause and take stock of the situation then
sensational crime occurs that an On-Scene start planning. This is where the crime scene
Command Post (OSCP) be immediately analysis starts.
established adjacent to the crime scene.
 Among others, the OSCP will be to provide j. Note down your observations continuously. It
a safe and secured area where the is a good idea to use a tape recorder.
Evidence Custodian may be located to
receive evidence and where other k. Decide whether you need help from an
operational and administrative activities may
expert such as a forensic pathologist, biologist
be undertaken.
etc.
Investigation of Crimes of Violence in General
l. Take photographs continuously. Photograph
The following checklist is meant as a guide
all the evidences before they are collected. If
and not as a substitute for critical thinking
possible, engage a photographer for
by the investigator.
specialized trace evidence photography.
Investigation of Crimes of Violence in
m. Search for and collect evidence, objects
General
and reference samples etc. that are relevant to
the crime investigation. Examine victims and
a. Find out as much as possible about the
suspects too. Pay attention to the risk of
crime before going to the scene, and upon
contamination.
n. Consider conducting a detailed and
extended search outside of the crime scene.
o. Write a (continuous) seizure report.
p. Check the crime scene before the cordon is
lifted. Make sure that you have not forgotten
anything important, such as interrogation
reports. A suspect may enter the crime scene
area after the cordon has been lifted, and this
must not be allowed to destroy the value of the
evidence collected.
PROTOCOLS IN INVESTIGATION
Protocol 1: Jurisdictional Investigation by
the Territorial Unit Concerned
The Police Station, which has territorial
jurisdiction of the area where the crime incident
was committed, shall immediately undertake
the necessary investigation and processing of
the crime scene, unless otherwise directed by
higher authorities for a certain case to be
investigated by other units/agency.
Protocol 2: Official Police Blotter
a. A Police Blotter is an 18” x 12” logbook with
hard-bound cover that contains the daily
register of all crime incident reports, official
summary of arrests, and other significant
events reported in a police station.
b. As a general rule, all crime incidents must
be recorded in the official police blotter.
c. A separate Police Blotter, however, shall be
maintained for offenses requiring confidentiality
like violence against women and children and
those cases involving a child in conflict with the
law to protect their privacy pursuant to R.A.
9262 (Anti-Violence Against Women and
Children Act of 2004) and R.A. 9344 (Juvenile
Justice and Welfare Act of 2006).
d. The duty police officer shall record the
nature of the incident in the police blotter
containing the five “W”s (who, what, where,
when and why) and one “H” (how) of the
information and inform his superior officer or
the duty officer regarding the occurrence of
such incident.
e. In answering the above 5 Ws and 1 H and
the Case Disposition, all such material details
about the incident, including the nature of the
action or offense; the Date, Time, and Place of
Occurrence; the names of the suspect/s, the
victim/s, the witness/es, if any; facts of the
case; significant circumstances that aggravate
or mitigate the event or the crime should be
entered along with the identity of the officer to
whom the case is assigned (Officer-on-case);
and, the status of the case.
Protocol 3: Investigation Team:
Organization and Equipment
a. All investigators in any police unit must be a
graduate of prescribed investigation course
with a rank of at least PO2 (pre-requisite to
assignment).
b. Composition:
1. Team Leader;
2. Investigator/recorder;
3. Photographer;
4. Evidence custodian; and
5. Composite Illustrator/Artist
c. Equipment of the investigator:
1. Police line;
2. Video camera;
3. Voice recorder;
4. Camera;
5. Measuring device;
6. Gloves;
7. Flashlight;
8. Fingerprint kit;
9. Evidence bag;
10. Evidence tag;
11. Evidence bottles/vials; and
12. Investigator‟s tickler (contains the following)
a) Investigator‟s checklist
b) Anatomical diagram form
c) Evidence checklist
d) Turn-over receip
Protocol 4: Duties of the First Responder
a. Proceed to the crime scene to validate
the information received;
b. Record the exact time of arrival and all
pertinent data regarding the incident in
his issued pocket notebook and notify
the TOC;
c. Cordon off the area and secure the
crime scene with a police line or
whatever available material like ropes,
straws, or human as a barricade to
preserve its integrity;
d. Check whether the situation still poses
an imminent danger and call for backup
if necessary;
e. Identify possible witnesses and conduct
a preliminary interview and ensure their
availability for the incoming investigator-
on-case;
f. Arrest the suspect/s if around or in
instances wherein the suspect/s is
fleeing, make appropriate notification for
dragnet operations;
g. Prepare to take the “Dying Declaration”
of severely injured persons with the
following requisites:
1. That death is imminent and the
declarant is conscious of that fact;
2. That the declaration refers to the cause
and surrounding circumstances of such
death;
3. That the declaration relates to facts to
which the victim is competent to testify;
4. That the declaration is offered in a case
wherein the declarant’s death is the
subject of the inquiry. (Section 37, Rule
130 of the Rules of Court).
h) Evacuate the wounded to the nearest
hospital using emergency services;
i) Account for the killed, wounded, and arrested
persons for proper disposition;
j) Conduct initial investigation; and
k) Brief the investigator-on-case upon arrival
and turn over the crime scene.
l) Conduct inventory on the evidence taken at
the crime scene; inventory receipt should be
properly signed by the first responder, SOCO,
and the investigator.
Protocol 5: Duties and Responsibilities of
the Investigating Team
a) Take full control of the crime scene to
include the conduct of crime scene search;
taking of photographs; making sketches; lifting
of fingerprints; markings of physical evidence;
(Chain of custody) the transmittal of evidence
to crime laboratory; interview of witnesses;
gathering and evaluation of evidence; follow-up
of the case and the documentation and filing of
appropriate charges in court;
b) Establish a command post in the immediate
vicinity of the crime scene;
c) Designate a holding area in the immediate
vicinity of the crime scene (for the media, VIPs,
and other personalities present);
d) Conduct case conference with the first
responder, SOCO, other law enforcers, and
rescue personnel;
e) Note any secondary crime scene (if the
situation requires); and
f) Release the crime scene after investigation.
Protocol 6: Investigation of Suspects
a) Procedures when an arrest is made:
1) Secure the person arrested (handcuff at the
back);
2) Inform the arrested person on the cause of
his arrest and his rights as provided for in the
Constitution;
3) Conduct thorough search for weapons and
other illegal materials against the suspect/s;
4) Use reasonable force in making an arrest;
5) Confiscated evidence shall be properly
documented and marked;
6) Bring the arrested person to the Police
Station for investigation.
b) Booking procedures of the Arrested
Person/Suspect
1) The arrested suspect shall be fingerprinted,
photographed, and subjected to medical
examination to include liquor and drug tests.
2) Conduct record check.
Protocol 7: Taking of Sworn Statements of
Suspects
The execution of a suspect’s “WAIVER” as
stipulated in Art. 125 of the RPC shall always
be done in the presence of his chosen counsel
or any independent counsel.
Protocol 8: Taking of Sworn Statement/s of
the Witnesses
a) Sworn Statement or Affidavit of
complainant/s and witness/es must be taken
immediately by the investigator-on-case.
b) Affidavit of Arrest of arresting officers must
be taken immediately not later than 24 hours.
c) In Inquest cases, the investigator-on-case
and the arresting officer/s shall observe Art.
125 of the RPC.
Protocol 9: Preparation of Reports and
Filing of Charges
The Investigator-On-Case shall submit the
following:
a. Spot Report within 24 hrs to HHQ;
b. Progress Report;
c. After Operation Report;
d. Final Report after the case is filed
before the prosecutor’s office/court; and
e. Accomplishment Report
Protocol 10: Procedure in the Release of
Crime Scene
a. Ensure that appropriate inventory has
been made;
b. The release is accomplished only after
completion of the final survey and
proper documentation of evidence,
witness/es, victim/s and suspect/s; and
c. If the crime scene is within a private
property, the same must be released to
the lawful owner witnessed by any
barangay official. In the case of a
government facility, it should be
released to the administrator.
Protocol 11: Follow-up of Case
The investigator shall conduct police
operations to identify and apprehend suspect/s
based on the results of the initial investigation
conducted.
Protocol 12: Preparation of Case
Investigation Plan (CIPLAN)
The conduct of police operations involving
sensational cases, high profile, and heinous
crimes must be covered by the Case
Investigation Plan.
Protocol 13: Attendance to Court Duties
The investigator-on-case and arresting officers
shall endeavor to ensure
their attendance during court hearings while
COPs/Heads of Units shall supervise and
ensure the attendance of witness/es.
Protocol 14: Uniform of the Investigator
Prescribed uniforms should be worn by
investigators when conducting investigations to
identify them as PNP personnel.

LESSON 6
STANDARD METHODS OF RECORDING
INVESTIGATIVE DATA
a. Photographs;
b. Sketching crime scenes;
c. Written notes (what you have seen or
observed);
d. Developing and lifting fingerprints
found at the crime scene;
e. Gathering physical evidence;
f. Plaster cast;
g. Tape recording of sounds;
h. Video tape recording of objects; and
i. Written statements of subject(s) and
witnesses.
CRIME SCENE PROCESSING
a. The Crime Scene Search
1. Processing and Securing a Crime Scene
 Processing a crime scene includes the
application of diligent and careful methods
by an investigator/policemen to recognize,
identify, preserve and collect fact and items
of evidentiary value that may assist in
reconstructing that which actually occurred.
 The crime scene is the area surrounding the
place where the crime occurred.
 The processing of the area at the scene
includes all direct traces of the crime. And
this is determined by the type of crime
committed and the place where the act
occurred.
2. Protecting the Crime Scene and the
Evidence
 Successful crimes scene processing
depends upon the policeman's or
investigator's skill in recognizing and
collecting facts and items of value as
evidence, and upon his ability to protect,
preserve, and later, to present these in a
logical manner.
 This requires making careful and detailed
notes and sketches; written statements and
transcribing verbal statements of witnesses,
suspects and marking and preservation of
collected physical objects of evidentiary
nature.
3. Laboratory examination of objects and
substances located usually at the crime
scene
 Objects and substances needing
examination in some cases are carried,
intentionally or unintentionally, by suspects
from the crime scene.
INVESTIGATOR’S NOTEBOOK
a. Purpose:
 Considering the mass of details and the
number of cases which in some instances
an investigator is handling, it is very
possible that he might forget some details.
 Many of the details associated with the
investigation, while not essential to the
report, might become points of interest to
the court when the case is brought to trial.
Experienced investigators employ a
notebook to record the relevant details of
the case.
 During trial, the court allows investigators to
consult their notes to refresh their memory.
b. Recording Note:
 The data of the investigation should be
recorded in a complete, accurate and
legible fashion so that in the event another
investigator is required to assume
responsibility for the investigation, he can
make intelligent use of the notebook.
LESSON 7
COMMON INVESTIGATION OVERSIGHTS
COMMON INVESTIGATION
OVERSIGHTS
a. Incomplete Case Folder
 lack of material documentation of
the case under investigation.
Recommended Remedies – include the
police reports in chronological order such
as police blotter, spot, progress and final
investigation report. Also, append the
scene of crime operation reports, forensic
reports and photographs. Further, if
possible, attach the profile of victim/s and
suspect/s, as well as the status of the
party involved and the case.
b. No template for the conduct of
investigation
 police personnel are not
knowledgeable about crime scene
preservation and basic investigation.
Recommended Remedies – every police
personnel should mandatorily undergo
investigation training giving priority to
those in the field units.
c. Inadequacy of coordination
 the SOCO, investigators,
prosecutors and other concerned
agencies work separately and
independently in the conduct of
their investigation.
Recommended Remedies - case
conferences should be encouraged at the
start of the investigation. The conferences
should be attended by the SOCO,
investigators, prosecutors, IBP lawyers
and other concerned agencies in order to
ensure the coordinated actions in the
preparation of an airtight case folder.
d. Failure to prosecute
 pertains to absence of police
investigator during trial to act as
prosecutor‟s witness due to
retirement and transfer of
concerned investigator.
Recommended Remedies – proper turn-
over of case folders handled by
investigators who shall retire or be
transferred, as requisite before the
issuance of office clearance.
e. Chain of Custody
 non-observance of proper
documentation in the turn-over of
evidence from one officer to
another or one office to another.
Recommended Remedies –
documentation on the turn–over of
evidence with actual receipt should be
observed and non-observance should be
the basis for administrative sanctions.
f. Less appreciation of electronic
evidence
 police investigators take for granted
the electronic devices such as
cellphones, computers and other
electronic devices can be
processed to give investigative
leads.
Recommended Remedies – proper
training on the preservation and
processing of electronic devices should
be prioritized for all investigators in the
field.
GENERAL INVESTIGATIVE PROCEDURES
GENERAL INVESTIGATIVE PROCEDURES
PURPOSE
 This investigative procedure is designed to
adapt to the current trends in modern
investigation, in line with the PNP Integrated
Transformation Program which seeks to
improve and integrate the different manuals
used by the PNP to serve as guide in all
aspects of police investigation.
 It also aims to come up with a definite
investigative procedure on specific cases
from the time the incident happened, until
the case is filed, which will be adopted by
the PNP investigators in pursuing their
mandated tasks.
PROCEDURES
Upon receipt of call/walk-in complainants
Duty Desk Officer shall:
a. Record the time it was reported;
b. Get the identity of the caller/complainant;
c. Get the place of the incident;
d. Get the nature of the incident;
e. Get the number of victim/s;
f. Record a brief synopsis of the incident;
g. Direct the nearest mobile car/beat patrollers
or the nearest police precinct to act as first
responder equipped with “police line” to secure
the place of incident a camera; and
h. Inform the duty investigator (preferably one
team of investigators).
AT THE CRIME SCENE
AT THE CRIME SCENE
The First Responder shall perform his/her duty
as stated in Protocol 4.
 In addition, check the condition of the victim
while the other members of the first
responders shall simultaneously secure the
area by putting a police line or any material
(like rope, straw and etc).
a. If in serious condition
1. Bring the victim immediately to the nearest
hospital using emergency services;
2. Photograph and make a sketch of the victim
(if the victim is dead);
3. Get the dying declaration; if necessary (ask
3 questions)
a) Ano ang pangalan at address mo?
b) Kilala mo ba ang gumawa nito sa iyo?
c) Sa pakiramdam mo ba ay ikamamatay mo
ang tinamo mong sugat?
However, if there is still a chance to ask more
questions, then follow-up should be done. The
statement, once reduced into writing, shall be
duly signed by or with thumb mark of the victim.
b. If not in serious condition
1. Bring the victim immediately to the nearest
hospital using emergency services;
2. Get the identity and other data of the victim;
3. Get initial interview from the victim Note: The
other member/s of the first responders shall
remain at the crime scene to secure the
premises.
c. If the suspect is arrested at the scene
1. Get the names of the persons who turned
over or arrested the suspect.
2. Isolate the arrested suspect/s and separate
them from any probable witness of the incident.
3. Record what time the suspect was arrested.
4. Wait for the investigator to interview the
suspect.
5. If the suspect volunteers any statement, take
note of the time, location and circumstances of
the statements.
LESSON 8
INVESTIGATION PROCEDURE AT THE
CRIME SCENE a. Upon arrival at the crime
scene
1. Receive the crime scene from the first responder.
2. Record time/date of arrival at the crime scene,
location of the scene, condition of the weather,
condition and type of lighting, direction of wind and
visibility.
3. Photograph and/or video the entire crime scene.
4. Before entering the crime scene, all investigators
must put on surgical gloves.
5. Before touching or moving any object at the
crime scene in a homicide or murder case,
determine first the status of the victim, whether he
is still alive or already dead. If the victim is alive,
the investigator should exert effort to gather
information from the victim himself regarding the
circumstances of the crime, while a member of the
team or someone must call an ambulance from the
nearest hospital. Before removing the victim, mark,
sketch and photograph his/her relative position.
Only a coroner or a medical examiner shall remove
the dead body unless unusual circumstances justify
its immediate removal.
6. Designate a member of the team or ask other
policemen or responsible persons to stand watch
and secure the scene and permit only authorized
persons to enter the same.
7. Identify and retain for questioning the person
who first notified the police, and other possible
witnesses.
8. Determine the assailant through inquiry or
observe him if his identity is immediately apparent.
Arrest him if he is still in the vicinity.
9. Separate witnesses in order to get independent
statements.
b. Recording
 The investigator begins the process of
recording pertinent facts and details of the
investigation the moment he arrives at the
crime scene. (He should record the time
when he was initially notified prior to his
arrival).
 He also writes down the identification of
persons involved and what he initially saw.
He also draws a basic sketch of the crime
scene and takes the initial photograph (if a
photographer is available, avail his services).
 This is to ensure that an image of the crime
scene is recorded before any occurrence that
disturbs the scene.
 As a rule, do not touch, alter or remove
anything at the crime scene until the
evidence has been processed through notes,
sketches and photograph, with proper
measurements.
c. Searching for evidence
1. Each crime is different, according to the physical
nature of the scene and the crime or offense
involved. Consequently, the scene is processed in
accordance with the prevailing physical
characteristics of the scene and with the need to
develop essential evidentiary facts peculiar to the
offense. A general survey of the scene is always
made, however, to note the locations of obvious
traces of action, the probable entry and exit points
used by the offender(s) and the size and shape of the
area involved.
2. In rooms, buildings, and small outdoor areas, a
systematic search of evidence is initiated (In the
interest of uniformity, it is recommended that the
clockwise movement be used.) The investigator
examines each item encountered on the floor, walls,
and ceiling to locate anything that may be of
evidentiary value.
3. You should give particular attention to fragile
evidence that may be destroyed or contaminated if it
is not collected when discovered.
4. If any doubt exists as to the value of an item, treat
it as evidence until proven otherwise.
5. Ensure that the item or area where latent
fingerprints may be present is closely examined and
that action is taken to develop the prints.
6. Carefully protect any impression of evidentiary
value in surfaces conducive to making casts or
molds. If possible, photograph the impression and
make a cast or mold.
7. Note stains, spots and pools of liquid within the
scene and treat them as evidence.
8. Treat as evidence all other items, such as hairs,
fibers, and earth particles foreign to the area in
which they are found; for example, matter found
under the victim's fingerprints.
9. Proceed systematically and uninterruptedly to the
conclusion of the processing of the scene. The
search for evidence is initially completed when,
after a thorough examination of the scene, the rough
sketch, necessary photograph and investigative
notes have been completed and the investigator has
returned to the point from which the search began.
10. Further search may be necessary after the
evidence and the statements obtained have been
evaluated.
11. In large outdoor areas, it is advisable to divide
the area into strips about four (4) feet wide. The
policeman may first search the strip on his left as he
faces the scene and then the adjoining strips.
12. It may be advisable to make a search beyond the
area considered to be the immediate scene of the
incident or crime. For example, evidence may
indicate that a weapon or tool used in the crime was
discarded or hidden by the offender somewhere
within a square-mile area near the scene.
13. After completing the search of the scene, the
investigator examines the object or person actually
attacked by the offender. For example, a ripped safe,
a desk drawer that has been pried open or a room
from which items has been stolen, would be
processed after the remainder of the scene has been
examined for traces of the offender.
14. In a homicide case, the position of the victim
should be outlined with a chalk or any other suitable
material before the body is removed from the scene.
If the victim has been pronounced dead by a doctor
or is obviously dead, it is usually advisable to
examine the body, the clothing and the area under
the body after the remainder of the scene has been
searched. This is to enable the
policeman/investigator to evaluate all objects of
special interest in the light of all other evidence
found at the scene.
d. Collection of Evidence
 This is accomplished after the search is
completed, the rough sketch finished and
photographs taken. Fragile evidence should
be collected as they are found.
 All firearms (FAs) found to have tampered
serial numbers (SNs) shall be automatically
subjected to macro etching at the Philippine
National Police Crime Laboratory (PNP-CL).
 A corresponding request to the Firearms and
Explosive Office (FEO) must be made for
verification purposes.
 The investigator places his initials, the date
and time of discovery on each item of
evidence for proper identification. Items that
could not be marked should be placed in a
suitable container and sealed.
e. Markings of Evidence
 Any physical evidence obtained must be
marked or tagged before its submission to
the evidence custodian.
 These are information to ensure that the
items can be identified by the collector at
any time in the future.
 This precaution will help immeasurably to
establish the credibility of the collector's
report or testimony and will effectively
avoid any suggestions that the item has been
misidentified.
MARKINGS ON THE SPECIMEN MUST AT
LEAST CONTAIN THE FOLLOWING:
1. Exhibit Case Number
2. Initials and or signature of the collecting officer.
3. Time and date of collection. NOTE: It is also
important to note the place or location where the
evidence was collected. f. Evaluation of Evidence
 Each item of evidence must be evaluated in
relation to all the evidence, individually and
collectively. If necessary, these pieces of
evidence must be subjected to crime
laboratory examination.
 Example: firearms for ballistic examination,
hair strands etc.
g. Preservation of Evidence
 It is the investigator's responsibility to
ensure that every precaution is exercised to
preserve physical evidence in the state in
which it was recovered/ obtained until it is
released to the evidence custodian.
h. Releasing of Evidence quantity of specimen should be adequate. Even with
the best equipment available, good results cannot be
 All collected evidence can only be released obtained from insufficient specimens. 3. Submit a
upon order of the court or prosecutor, as the known or standard specimen for comparison
case maybe. purposes. 4. Keep each specimen separate from
others so there will be no intermingling or mixing
i. Chain of Custody of known and unknown material. Wrap and seal in
A list of all persons who came into possession of an individual packages when necessary. 5. Mark or
item of evidence, continuity of possession, or the label each of evidence for positive identification as
chain of custody, must be established whenever the evidence taken from a particular location in
evidence is presented in court as an exhibit. connection with the crime under investigation. 6.
Adherence to standard procedures in recording the The chain of custody of evidence must be
location of evidence, marking it for identification, maintained. Account for evidence from the time it is
and properly completing evidence submission forms collected until it is produced in court. Any break in
for laboratory analysis is critical to chain of custody. this chain of custody may make the material
Every person who handled or examined the inadmissible as evidence in court.
evidence and where it is at all times must be
accounted for. As a rule, all seized evidence must
be in the custody of the evidence custodian and
deposited in the evidence room or designated place
for safekeeping.
CHAIN OF CUSTODY (Change of Possession)
The Scene Evidence – Seal, Markings, Evidence
Log
Evidence Collector (Officer on Case) Letter
Request
Evidence Custodian
Crime Laboratory Result Court order
(Subpoena)
Court Presentation

j. Transmittal of Evidence to Crime Laboratory

 Proper handling of physical evidence is

necessary to obtain the maximum possible
information upon which scientific
examination shall be based, and to prevent
exclusion as evidence in court.
 Specimens which truly represent the
material found at the scene, unaltered,
unspoiled or otherwise unchanged in
handling will provide more and better
information upon examination.
 Legal requirements make it necessary to
account for all physical pieces of evidence
from the time it is collected until it is
presented in court.

The following principles should be observed in

handling all types of evidence: 1. The evidence
should reach the laboratory in same condition as
when it was found, as much as possible. 2. The
LESSON 9
METHODS OF CRIME SCENE SEARCH
Crime Scene Search
 Is a systematic method employed
by the SOCO Team, if the nature of
the case is sensational or sensitive,
and the IOC in the conduct of
search in the crime scene and in
the surrounding areas where the
alleged crime/incident/event has
taken place for the purpose of
finding and recovering evidence.
 There are several methods of crime
scene search which can be
employed such as strip search,
double strip search, spiral search,
zone or quadrant search, wheel
method.
a. Strip Search Method
 In this method, the area is blocked
out in the form of a rectangle.
 The three (3) Searchers A, B, and
C, proceed slowly at the same pace
along paths parallel to one side of
the rectangle.
 When a piece of evidence is found,
the finder announces his discovery
and the search must stop until the
evidence has been cared for.
A photographer is called, if
necessary. The evidence is collected and
tagged and the search proceeds at a
given signal. At the end of the rectangle,
the searchers turn and proceed along
new lanes as shown in the above
illustration. PNP Criminal Investigation.
b. Double Strip Search Method
 The double strip or grid method of
search is a modification of the Strip
Search Method. Here, the rectangle is
traversed first parallel to the base then
parallel to a side.
c. Spiral Search Method
 In this method, the three searchers
follow each other along the path of a
spiral, beginning on the outside and
spiraling in toward the center.
d. Zone Search Method
 In this method, one searcher is assigned
to each subdivision of a quadrant, and
then each quadrant is cut into another
set of quadrants.
e. Wheel Search Method
 In this method of search, the area is
considered to be approximately circular.
The searchers gather at the center and
proceed outward along radii or s**s. The
procedure should be repeated several
times depending on the size of the circle
and the number of searchers.
 One shortcoming of this method is the
great increase in the area to be
observed as the searcher departs from
the center.
PROCEDURES ON TAKING PHOTOGRAPHS
a. Overall photos of the scene are taken to
show the approach to the area, street signs,
and street light locations in relation to the
actual scene, street addresses and identifying
objects at the scene. Pictures should also be
taken of every room in the house, even if their
relationship to the crime scene is not readily
apparent.
b. Photograph the scene in a clockwise pattern
before altering the body's position or any other
evidence within the scene. Photograph the
scene from at least 2 opposite corners, but
from all four corners is even better. This way,
nothing is missed or hidden from view by
intervening objects.
c. Photograph the body and the immediate
vicinity around the body. If you have a camera
boom, take pictures from ceiling height down of
the victim and any other evidence. This
perspective often shows things missed when
viewed from ground or eye level.
d. Keep a photo log.
PROCEDURES ON MAKING A SKETCH
a. To establish admissibility, the investigator
must have personal observation of the data in
question. In other words, the sketch must be
sponsored or verified.
b. REMINDER: Sketches are not a substitute
for notes or photos; they are but a supplement
to them.
c. Types of sketches:
1. Floor plan or “bird‟s-eye view”;
2. Elevation drawing;
3. Exploded view; and
4. Respective drawings.
d. Write down all measurements.
e. Fill in all the details on your rough sketch at
the scene. Final sketch may be prepared at the
office.
f. Keep the rough sketch even when you have
completed the final sketch.
g. Indicate the North direction with an arrow.
h. Draw the final sketch to scale.
i. Indicate the PLACE in the sketch as well as
the person who drew it. Use KEY-capital letters
of the alphabet for listing down more or less
normal parts or accessories of the place, and
numbers for items of evidence.
j. Indicate the position, location and
relationship of objects.
k. Methods or systems of locating points
(objects) on sketch:
1. Rectangular coordinates. (Measurements at
right angles from each of two walls).
2. Coordinates constructed on transecting base
line. Choose relatively fixed points for your
base line.
3. Triangulation. (Measurements made from
each of two fixed objects to the point you want
to plot or locate so as to form an imaginary
triangle. Sketch will show as many imaginary
triangles as there are objects plotted).
l. Critical measurements, such as skid marks,
should be checked by two (2) investigators.
m. Measurements should be harmony or in
centimeters, inches, yards, meters, mixed in
one sketch.
n. Use standard symbols in the sketch.
o. Show which way the doors swing.
p. Show with arrow the direction of stairways.
q. Recheck the sketch for clarity, accuracy,
scale, and title, key.
PROCEDURES ON LIFTING FINGERPRINTS
a. Dusting for Latent Fingerprints
1. Pour a small amount of powder into a piece
of paper or a shallow bowl.
2. Touch the tip of the brush to the powder
being careful not to pick up too much.
3. Apply the powder to the surface gently,
using short strokes.
4. When a print begins to appear, begin
making the brush strokes to conform to the
pattern of the ridges.
b. Lifting of Latent Fingerprints

1. Pull off approximately 3 inches of tape from

the roll.

2. Begin pressing the tape from the leading

edge with a back and forth motion of a finger.

3. Continue pressing the tape an inch or more

past the latent.

4. To make the lift, use a steady, even pull.

5. Once the tape is pulled beyond the latent

print and the print is lifted, stop so that the
leading edge is still in contact with the surface.

6. The print should be mounted on some form

of backing material.

c. Taking Plain Impressions

1. DO NOT ROLL the fingers when inking or

taking the impression.

2. Use the same position as when rolling the

fingers.

3. Ink the right thumb by pressing it straight

down onto the ink surface (do not roll).

4. Ink the remaining four fingers simultaneously

by pressing them onto the ink surface.

5. Repeat the same procedure with the left

hand.
LESSON 10
SOCO Assistance
a. In cases where the crime scene needs
special processing due to its significance
or because of its sensational nature, the
Scene of the Crime Operation (SOCO)
specialists of the Crime Laboratory shall
be requested.
b. If the situation involves a clandestine
drug laboratory, biological weapons,
radiological or chemical threats, the
appropriate agency should be contacted
prior to entering the scene.
1. Significant Cases:
a) Bombing Incident
b) Initiated terrorist activities
c) Raids, ambuscade, liquidation
d) KFR case
e) Armed Robbery of Banks and other
f) Financial institution
g) Calamity/Disaster
h) Massacre
i) Heinous crimes (as defined by law)
j) Murder, Homicide, Arson, Rape with
Homicide
2. Sensational Cases:
a) Elected Public Officials (Brgy Captain
up to President of the RP)
b) Appointed public officials with the rank
of commissioner, secretary and
undersecretary
c) Foreign diplomat
d) Any foreigner
e) PNP/AFP personnel
f) Former high-ranking government
officials
g) Other prominent figures such as movie
stars, sports stars, tri-media practitioners,
prominent businessmen, professionals,
and prominent leaders of religious
organizations.
RELEASE OF CRIME SCENE
Ensure that appropriate inventory has been
provided.
a. Release the scene with the notion that there
is only one chance to perform job correctly and
completely.
b. Release is accomplished only after
completion of the final survey and proper
documentation.
Importance of Conducting Scene
Assessment
Assessment of the scene by the investigator(s)
in charge allows for the determination of the
type of incident to be investigated and the level
of investigation to be conducted.
The investigator(s) in charge shall identify
specific responsibilities, share preliminary
information, and develop investigative plans in
accordance with the office policy.
The investigator(s) in charge should:
a. Converse with the first responder(s)
regarding observations/activities.
b. Evaluate safety issues that may affect all
personnel entering the scene(s) (e.g., blood-
borne pathogens, hazards).
c. Evaluate search and seizure issues to
determine the necessity of obtaining consent to
search and/or obtain a search warrant.
d. Evaluate and establish a path of entry/exit to
the scene to be utilized by authorized
personnel.
e. Evaluate initial scene boundaries.
f. Determine the number/size of scene(s) and
prioritize.
g. Establish a secure area within close
proximity to the scene(s) for the purpose of
consultation and equipment staging.
h. If multiple scenes exist, establish and
maintain communication with personnel at
those locations.
i. Establish a secure area for temporary
evidence storage in accordance with rules of
evidence/ chain of custody.
j. Determine and request additional
investigative resources as required (e.g.,
personnel/specialized units, legal consultation/
equipment). prosecutors,
k. Ensure continued scene integrity (e.g.,
document entry/exit of authorized personnel,
prevent unauthorized access to the scene).
l. Ensure that witnesses to the incident are
identified and separated (e.g., obtain valid ID).
m. Ensure the surrounding area is canvassed
and the results are documented.
n. Ensure preliminary
documentation/photography of the scene,
injured persons and vehicles.
Remember: Scene assessment allows for the
development of a plan for the coordinated
identification, collection, and preservation of
physical evidence and identification of
witnesses. It also allows for the exchange of
information among law enforcement personnel
and the development of investigative strategies
Conduct of Scene "Walk-Through" and Initial
Documentation
The scene "walk-through" provides an
overview of the entire scene, identifies any
threats to scene integrity, and ensures
protection of physical evidence. Written and
photographic documentation provides a
permanent record.
A "walk-through" should only be completed if
there will be no disturbing of evidence. There
may be the need for the immediate
documentation and collection of evidence prior
to the walk through.
As a rule: The investigator(s) in charge shall
conduct a walk-through of the scene. The walk-
through shall be conducted with individuals
responsible for processing the scene.
During the scene walk-through, the
investigator(s) in charge should:
a. Avoid contaminating the scene by using the
established path of entry.
b. Consider whether personal protective
equipment (PPE) should be used.
c. Prepare preliminary documentation (e.g.
notes, rough sketches) of the scene as
observed.
d. Identify and protect fragile and/or perishable
evidence (e.g., consider climatic conditions,
crowds/hostile environment). Ensure that all
evidence that may be compromised is
immediately documented, photographed and
collected.
e. When involved in the initial walkthrough,
note the condition of the scene.
Record relevant observations, which may
include things such as:
 Ceilings
 Doors, including entry and exit points:
Are they open, closed, locked or forced
open? On which side was the key?
  Windows: Are they open or closed? Is
there broken glass? Were they locked or
forced open?
 Lights: On or off? If left on, which lights
were on?
 Shades or shutters: Open or closed?
 Floors/Rugs
 Interior lighting conditions
 Odors: Cigarette smoke, gas, powder,
perfume, etc.
 Description of perpetrator (when present)
 Description of crime-related people
present
 Description of emergency medical or
search-and-rescue personnel present
 Weapons observed
 Furniture present, including location
relative to victim, as applicable and
overall scene
 Signs of activity: Meal preparation,
dishes in sink, condition of
housekeeping (clean, dirty or items in
disarray), appliances left on,
television/stereo left on (note the
channel), etc.
 Date and time indicators: Mail,
newspapers, dates on milk cartons,
stopped clocks, spoiled foods, items that
should have been hot or cold, but are at
room temperature
 Temperature of the room and
environmental conditions
F. DEVELOP A GENERAL THEORY OF THE
CRIME
Remember:
 Conducting a scene walk-through provides
the investigator(s) in charge with an
overview of the entire scene.
 The walk-through provides the first
opportunity to identify valuable and/or fragile
evidence and determine initial investigative
procedures, providing for a systematic
examination and documentation of the
scene.
 Written and photographic documentation
records the condition of the scene as first
observed, providing a permanent record.
Note-Taking and Logs
Note-taking and logs provide a permanent
record of crime scene activities.
 As a rule: All personnel assigned to the
crime scene investigation shall maintain
notes and logs of their activities.
Detailed entry/exit logs should be created.
 An entry/exit log is used to document the
people who come to and go from a crime
scene during the investigation. People who
were at the crime scene before the
investigation began are also noted in this
log.
The officer monitoring the log, the "Log
Officer," is assigned the task by the
Supervising Officer and is responsible for
completing this task and monitoring the log at
all times.
The Log Officer is responsible for ensuring
that the log is filled out thoroughly and anyone
entering the scene has a stated purpose there.
A. Position the log so that it is clearly visible.
Set up the log for people to use when arriving
to and departing from the scene.
Record the following information about the
crime scene:
 Crime scene location
 Name of witnesses
 Name of victims
 Name of persons taken into custody
 Name of first responders and
approximate arrival times Name of
Supervising Officer and approximate
arrival time (approximate time should be
used if arrival time was before the log
was established).
B. Record the information below for each
person at the scene. If not using an official
logbook or forms, leave spaces where this
information can be recorded:
 Arrival date
 Time of arrival
 Name
 Identification and Unit numbers
 Organization (if not with the
investigating department)
  Reason for being at the scene Log
information should include:
 The arrival and departure times of all
personnel at the crime scene, including
the Medical Examiner, crime scene
technicians, and State's Attorney.
 Information about: who is at the crime
scene and why they are there; incident
number; first responder names, Log
Officer and Supervising Officer names,
shield numbers, Unit numbers; location
of crime scene; name of victim(s)
 Before making it available to crime
scene visitors, record logistical data
(time, crime scene location, names of
victims and witnesses, etc.) in the
entry/exit log.
 Ensure that the departure time for any
person departing from the scene is
recorded prior to that person actually
leaving.
 If someone exits the scene without
reporting to the Log Officer, that officer
can enter an estimated departure time
along with a note stating the rationale
for it being estimated.
 Store the log in a secure location and as
mandated by departmental regulations.
Remember: Note-taking and an entry/exit log
records the persons present at a crime scene
for investigative and prosecutorial purposes.
LESSON 11
FORENSIC SCIENCE: ITS ROLE IN THE CRIME
SOLUTION
What is Forensic Science?
The word forensic comes from the Latin
word "forensis": public, to the forum or
public discussion a relevant, modern
definition of forensic is relating to use in,
or suitable to a court of law (Merriam
Webster Dictionary, www.merriam-
webster.com).
Any science used for the purposes of
the law is a Forensic Science.
The forensic sciences are used around
the world to resolve civil disputes, to justly
enforce criminal laws and government
regulations.
Forensic scientists may be involved
anytime an objective, scientific analysis is
needed to find the truth and to seek
justice in a legal proceeding.
Early on, Forensic science became
identified with law enforcement and the
prosecution of criminal cases - an image
enhanced by books, television, and
movies. This is misleading because
forensic science is objective, unbiased,
and applies equally to either side of any
criminal, civil, or other legal matter.
Forensic investigations involve the
discovery and characterization of
evidence that can be used to reconstruct
a chronology of events associated
with the commission of a crime or other
matters being adjudicated. As they
become available, increasingly
sophisticated analytical tools and
methods are being employed to detect
and discriminate evidence.
The word forensic, as derived from Latin
word forum. The early Romans used
forum for variety of purposes like market,
public discussion, business and
commercial transactions. These forums
played their role of criticism, scrutiny and
shaped civil law.
FORENSIC SCIENCE
It includes the evidence brought in the
court of law to prosecute a suspect of
crime.
Forensic science helps in solving crime
by involving witnesses, victims and the
experts in the court of law.
Forensic science helps to integrate
criminal investigators and scientists to
objectively analyze the evidence found on
the crime scene scope and application.
It is known by several identities like
Forensics, Forensic/medical
jurisprudence, besides its other
disciplinary inter-linkages like Forensic
Anthropology, Forensic Archeology,
Forensic Psychology, Criminalistics and
Forensic Hypnosis.
The forensic science engages
pathologists, biologists, physicists,
chemists and medical officers to solve
queries of crime. Forensic science can
effectively help found missing persons,
establishing their true identities, relate
and prosecute through testimony who
victimized whom through production of
scientific evidence. Also provide
meaningful leads in investigation.
The suspect's identity, victim's
circumstances (like rape) could be related
by carefully examining the data. The  It is found in most cells of every organism.
 It is a key part of reproduction in which
fingerprints, footwear impressions and
genetic heredity occurs through the passing
tool marks could be collected technically. down of DNA from parent or parents to
The casting kit and other related forensic offspring.
science tools are used.  The totality of an individual’s DNA is unique
for the individual, except identical twins.
The trace evidence may also provide
clues to further lead towards the suspect
and victim identification. There are
biological fluids (body fluids) which
include blood, semen, urine, ***l
secretions, saliva, feces and vomit).

They provide the DNA. They are collected

in sterile container for laboratory analysis
through a scalpel particles of matter and
tiny fibers left at the crime scene. It must
be recognized, documented, packaged
and preserved. Human hair is usually the
trace evidence. The DNA contains four nucleotides which are:

Forensic science applies technical skills 1. Thymine(T) -

to detect, identify and prosecute offenders.
2. Adenine (A)
The application and awareness of
forensic science is growing in Law 3. Cytosine (C)
Enforcement Agencies all over the world.
4. Guanine (G)

The all-human beings have unique DNA which

Forensic Archeology is the field dealing with
buried human and a*** remains and artifacts.
Anthropology is the study of humans and their
cultures.
provides a unique pattern helpful to relate to
exact identity of the person (Adams, Julian
1990).
The DNA matching proves someone's
innocence or guilt.

Forensic anthropology is the medicolegal
study of human remains, especially human
osteology.
The DNA evidence is highly useful in rape
incidents, fire-related accidents/ disasters,
paternity identity cases, and establishing
identities of missing persons or unidentified
dead bodies.

DNA (Deoxyribonucleic acid) DNA evidence

DNA (Deoxyribonucleic acid) has a shape of
long spiral ladder.
 It is an organic chemical that contains
genetic information and instructions for
protein synthesis.
 constitutes the totality of the DNA
profiles, results and other genetic
information directly generated from DNA
testing of biological samples.
Biological sample
 means any organic material originating
from a person’s body, even if found in
inanimate objects, that is susceptible to
DNA testing. This includes blood, saliva
and other body fluids, tissues, hairs and
bones.
DNA profile
 means genetic information derived from
DNA testing of a biological sample
obtained from a person, which biological
sample is clearly identifiable as
originating from that person.
DNA testing
 means verified and credible scientific
methods which include the extraction of
DNA from biological samples, the
generation of DNA profiles and the
comparison of the information obtained
from the DNA testing of biological
samples for the purpose of determining,
with reasonable certainty, whether or
not the DNA obtained from two or more
distinct biological samples originates
from the same person (direct
identification) or if the biological samples
originate from related persons (kinship
analysis).
This could be very helpful in criminal
investigation process if the data base
is developed and properly utilized.
The matching of the information clues found on
the crime scene and witness and victim
interviews narrows down criminal suspects and
effectively assists detecting the crime.
DNA (Deoxyribonucleic acid)
Probability of Parentage
 means the numerical estimate for the
likelihood of parentage of a presumed
parent compared with the probability of a
random match of two unrelated individuals
in a given population.
 DNA results that exclude the **tive parent
from paternity shall be conclusive proof of
non-paternity. If the value of the Probability
of Paternity is less than 99.9%, the results
of the DNA testing shall be considered
as corroborative evidence. If the value of
the Probability of Paternity is 99.9% or
higher there shall be a dis**ble
presumption of paternity.
 The Y-Chromosome is typically used in
exploring the true contribution of biological
evidence.
 The controversy on father, and involvement
in rape could be successfully solved in this
way.
 The DNA matching focuses on base pair
repletion patterns. The crime scene
contains the proof who has committed the
crime.
 The procedures are being followed by the
criminal investigator like reconstruction of
the crime scene, identity of the suspect and
valuable evidence which is presented
before the court.
 The Physical evidence confirms the
commission of the crime, connecting the
crime to the suspect and proving who was
victimized).
 The forensic science techniques help
minimize the suspect number.
 The forensic science explains the
identity (who) of the suspect who
committed the crime.
 The evidence clearly indicates the type
(what) of the crime committed.
 The circumstances speak out about the
time (when) of the incident.
 The forensic evidence proves the
location of the offense (where/ crime
scene). The forensic investigation finds
out the modus operandi (how) of the
offender.
 It establishes the motive behind the
crime. The forensic investigators
reconstruct identity of the offender and
the victim. There can be primary,
secondary and tertiary crime scenes
depending on the incident.
 The technological advances, the
forensic techniques and forensic
laboratories are very significant
factors/actors in solving crimes.
FOUR DISTINCT LABORATORIES IN THE
PHILIPPINES
The applied role of areas of Natural and
Physical sciences is defined as forensic
science.
The forensic science depicts a clear picture of
the type of the crime, motive underlying it and
the person responsible for it.
The Forensic Science includes within its scope
as crime-solving sciences of the following:
 Anthropology
 Biology the disciplines like Criminology,
 Criminal Justice
 Chemistry
 Entomology
 Engineering
 Medicine (Pathology and Psychology,
Odontology),
 Physics
 Geology
Forensic science
 is a versatile and enormously
powerful tool in the investigation
Forensic tools and techniques must
be aided by of a crime the
knowledge, experience, intuitive
detectives, police and other experts'
role (Platt, 2003).
 Forensic science engages all
evidence collected on the crime
scene to solve query of the crime.
The processes are procedures are
carefully followed.
 The evidence are vital linkages
providing pointers towards suspects
and victims of the crimes. The
search patterns help in collecting
the physical and other evidence.
 The DNA experts recover
fingerprints through use of technical
tools and kits. The shoeprints and
tire tracks provide hints towards
criminal identity, type of vehicle,
height and gait of the criminal.
 Forensic science helps
investigators in investigating
homicide rapes and accident-
related incidents. Besides,
unidentified bodies, missing
persons and fraud and forgery
cases are also solved.
The investigator primarily determines
whether or not crime has been committed.
The crime scene and evidence are
protected. Besides, to locate victim and
apprehend the offender are also
important tasks.
The information is sought using it for
testifying in count Thus the suspect is
prosecuted in court.
What is Physical evidence? 2. Associative evidence

Physical evidence Associative evidence are kinds of

 are articles and materials found in
connection with the investigation
which aids in establishing
the identity of the perpetrator.
evidence which link the suspect to the
crime scene or offense. Fingerprints and
shoe impressions are good examples of
associative evidence.

 The term physical

evidence includes any physical
thing that may be found at the crime
scene or found at another location
yet having a direct connection or
relationship with the scene, the
suspect or the victim.

 The proper locating, collecting,

handling and preservation of
evidence will many times be the
determining factor in establishing
guilt or innocence of an accused.
KINDS OF PHYSICAL EVIDENCE:
In Criminal Investigation and detection,
the following are the kinds of Physical
evidence:
1. Corpus Delicti
Corpus delicti are objects or substances
which are an essential part of the body of
the crime.
3.Trace evidence
Trace evidence are articles which assist
the investigator in locating the suspect.
One of the most common types of
physical evidence that an investigator or a
crime scene specialist encounter is trace
evidence.
 Trace evidence is a generic term for
small, usually microscopic
material/s.
 Trace evidence found in the crime
scene includes but are not limited to
blood, hair, glass particles, paint,
fibers or even soil.
SIGNIFICANCE/IMPORTANCE IDENTIFICATION
OF PHYSICAL
The following are the
significance/importance of Physical
Identification:

a. Establishes investigative leads.

b. Resolves ownership issues

c. Strengthens filed cases in court.

d. Proves that a crime has been

committed or establish key elements of
the crime.

e. Links a suspect to the victim or the

crime scene Establishes the identity of
persons associated with a crime.

g. Exonerates innocent.

h. Corroborate victim's testimony.

i. Induces a suspect to make admissions

or even confession.

J. Negative evidence can help provide

proof.

k. Physical evidence can be more reliable

than eyewitness testimony.
LESSON 12
INSTRUMENTATION
INSTRUMENTATION

The application of instruments and methods of

physical sciences in the investigation and
detection of criminal such as:

 Ballistics

 Dactyloscopy

 Chemistry

 Polygraphy
Ballistics
 Questioned Document
 refers to the science of the travel of a
 Forensic Identification of Physical projectile in flight.
evidence and others  The flight path of a bullet includes travel
down the barrel, path through the air
 Digital Forensic and path through a targe

Such application of instruments and methods

of physical sciences in the investigation and
detection of criminal is otherwise known as
criminalistics.

FORENSIC SERVICES IN PHILIPPINE LAW

ENFORCEMENT

1. Internal Ballistics - Travel down the barrel

2. External Ballistics - Path through the air

3. Terminal Ballistics - Path through a target

Forensic Ballistics

 is the science of analyzing firearm

usage in crimes.
 Forensic ballistics involves analysis of
bullets and bullet impacts to determine
the type.
 Separately from the ballistics
information, firearm and tool mark
examinations also involve analyzing
firearm, ammunition, and tool mark
evidence in order to establish whether a
 certain firearm or tool was used in the from the crime scene came from a firearm allegedly
commission of a crime. fired by the suspect

JUXTAPOSITION

 Two objects is evidence bullet and test

bullet are examined and compared
under the bullet comparison microscope.
Includes also the examination of fired
shells.

FORENSIC DACTYLOSCOPY

 In very simple terms, Forensic Dactyloscopy

means the scientific investigation of
fingerprints and toe or footprints to identify
Forensic Ballistics or otherwise known as Firearm the owner.
 The prints are most commonly used as a
Identification is a discipline of forensic which is
concerned with the determination of whether a method of identifying criminals.
 This type of scientific evidence is often
bullet, cartridge case or ammunition component
was fired in a particular firearm. produced and explained by expert
witnesses in criminal trials. However, there
are several purposes for collecting and
recording individual's prints but they are all
related in one way or another with providing
proof of identity

Dactyloscopy

 is the identification of a person through

the examination and comparison of
fingerprints.
 It is also known as the Classification of
fingerprints.

Firearm Identification

 is a comparative examination, where the

ammunition components of unknown
origin (recovered from the crime scene
or in the body of the victim) are
compared with bullets, cartridge cases,
and by test firing the firearms of the
suspect. The known and unknown items
are compared microscopically using a
bullet comparator microscope.

This modern method of crime detection and

identification determines whether the bullet
extracted from the body of the victim or recovered
Fingerprint
 is the reproduction on some smooth
surfaces of the pattern or design formed
by ridges on the inside of the end joint of
the fingers and thumbs.
FORENSIC CHEMISTRY
Forensic Chemistry
 Like the other forensic sciences, Forensic
Chemistry plays a very important part in the
speedy investigation and in the
administration of justice.
 is a branch of Chemistry which deals with
application of chemical principles in the
solution of legal problems.
 This Science has an advantage over
extracted confessions, eyewitnesses and
other circumstantial evidence.
 It is regarded as the highest form of
uncontestable and conclusive piece of
evidence with the utmost legal significance.
 The value of the findings of the Forensic
Chemists in convicting the guilty, as well as
in clearing the innocent suspect, is well
recognized.
 Many different analytical methods may
be used to reveal what chemical
changes occurred during an incident,
and so help reconstruct the sequence of
events.
 Forensic chemistry is unique among
chemical sciences in that its research,
practice, and presentation must meet
the needs of both the scientific and the
legal communities. As such, forensic
chemistry research is applied and
derivative by nature and design, and it
emphasizes metrology and validation.
F0RENSIC POLYGRAPHY
Polygraphy, otherwise known as Scientific
truth verification.
 refers to the scientific method of detecting
deception with the use of the polygraph.
 is an instrument or device capable of
recording changes in blood pressure, pulse,
respiration and skin resistance in the
physiological phenomena that may be used
as bases for the application of a reliable
technique of diagnosing truth of deception.
American inventor Leonarde Keeler (1903–
1949) testing his improved lie-detector on
Kohler, a former witness for the prosecution at
the 1935 trial of Richard Hauptmann
 is commonly called as lie
detector; polygraph
machine; detectograph and truth
verifier.
 It is administered by a trained
polygraphist, lie detector specialist,
Forensic psychophysiologist or
polygraph examiner by asking questions
to the subject relevant to the case under
investigation.
Polygraph
 The polygraph is a mechanical means of
detecting deception.
 The polygraph is a machine that
measures physiological responses to
psychological phenomenon.
 The polygraph records blood pressure,
pulse, breathing rate, and electro-
dermal reactivity and changes in these
factors when questioned.
 Interpretation of the resulting chart
serves as the basis for a judgment
about truthfulness.
 Once again, the theory is that a person
experiences increased stress when
providing deceptive information and the
corresponding physiological responses
 can be detected, measured, and
interpreted.
 While this general theory is well founded,
the accuracy of the polygraph depends
largely on the skill of the operator and
the individual who interprets the results
of the polygraph examination (Raskin).
No one can be forced to take a
polygraph and polygraph results are
seldom admissible in court.
 Often investigators threaten suspects
with a polygraph examination in order to
judge the nature of their reaction to it, or
to induce a confession.
Supreme Court has ruled that polygraph
testimony is typically not admissible in court.
Exceptions to this rule:
1. One exception is when both parties
agree to the admissibility of polygraph
evidence. In such a case, the parties
must enter into a written stipulation or
agreement that the polygraph results
may be presented as evidence in court.
The stipulation must also state the
specific questions asked during the
polygraph test and the answers given by
the examinee.
2. Another exception is when the
polygraph evidence is used to impeach
the credibility of a witness. This means
that the results of a polygraph test may
be used to challenge the truthfulness of
a witness’s testimony, but not as
evidence of the truth of a particular fact.
FORENSIC DOCUMENT EXAMINATION
Questioned Document
Examination (QDE)
 It is the examination of
documents potentially disputed in a
court of law.
 Its primary purpose is to provide
evidence about a suspicious or
questionable document using
scientific processes and methods.
 Evidence might include alterations,
the chain of possession, damage to
the document, forgery, origin,
authenticity, or other questions that
come up when a document is
challenged in court.
 orensic Document Examination
 Many QDE involve a comparison of
the questioned document, or
components of the document, to a
set of known standards. The most
common type of examination
involves handwriting wherein the
examiner tries to address concerns
about potential authorship.
 A document examiner is often
asked to determine if a questioned
item originated from the same
source as the known item(s), then
present their opinion on the matter
in court as an expert witness.
 Other common tasks include
determining what has happened to
a document, determining when a
document was produced, or
deciphering information on the
document that has been obscured,
obliterated, or erased.
 A forensic document examiner is
intimately linked to the legal
system as a forensic scientist.
 Forensic science is the application
of science to address issues under
consideration in the legal system.
 FDEs examine items (documents)
that form part of a case that may or
may not come before a court of law.
Common criminal charges involved in
a document examination case fall into
the "white-collar crime" category.
These include identity theft, forgery,
counterfeiting, fraud, or uttering a forged
document.
Questioned documents are often
important in other contexts simply
because documents are used in so many
contexts and for so many purposes.
For example, a person may commit
murder and forge a suicide note. This is
an example where a document is
produced directly as a fundamental part
of a crime. More often a questioned
document is simply the by-product of
normal day-to-day business or personal
activities.
Article 171 of the Revised Penal Code is
a public officer, employee, or notary, then
the higher penalty of prision mayor (in
addition to a court imposed fine) is
imposed.
Art. 172. Falsification by private individual
and use of falsified documents.
Falsification of Private, Public or Commercial
Documents
A more common type of falsification
involves the commission of any of the
following acts:
1. Counterfeiting or imitating any
handwriting, signature or rubric;
2. Causing it to appear that persons have
participated in any act or proceeding
when they did not in fact so participate;
3. Attributing to persons who have
participated in an act or proceeding
statements other than those in fact made
by them;
4. Making untruthful statements in a
narration of facts;
5. Altering true dates;
6. Making any alteration or intercalation in
a genuine document which changes its
meaning;
7. Issuing in an authenticated form a
document purporting to be a copy of an
original document when no such original
exists, or including in such a copy a
statement contrary to, or different from,
that of the genuine original; or
8. Intercalating any instrument or note
relative to the issuance thereof in a
protocol, registry, or official book.
The nature of the offense will depend on
one (1) factor – whether the person that
committed the act is a public officer,
employee, or notary who, taking
advantage of his official position, or a
private individual.
Penalties for the Different Classes of
Falsification
As to their respective penalties
The crimes of Falsification of Private,
Commercial or Legislative Documents,
and Wireless, Telegraph or Telephone
Messages are met with the
common penalty of prision
correccional or imprisonment ranging
from six (6) months and 1 day to six (6)
years.
If the offender is a public officer,
employee or notary or ecclesiastic
minister, the penalty is prision
mayor or imprisonment ranging from
six (6) years and 1 day to twelve (12)
years. These penalties are in addition to
the fine that the law imposes on the
offender.
FORENSIC IDENTIFICATION OF PHYSICAL
EVIDENCE
The ultimate result of the identification is the
exclusion of all other substances but one.

When a forensic examiner goes to court with

the result of an analysis of a white powder and
reports to the court, for example, that that white
powder contains heroin, that forensic examiner
will be as certain as to his or her findings and
to the identity of his or her findings as modern
technology will allow one to be. It must be a
near absolute identification and exclude all
other substances from consideration.
LESSON 13
DIGITAL FORENSICS
Digital forensics
 sometimes known as digital forensic
science.
 is a branch of forensic
Science encompassing the recovery,
investigation, examination, and analysis of
material found in digital devices, often in
relation to mobile devices and computer
crime.
 The term "digital forensics" was originally
used as a synonym for computer
forensics but has expanded to cover
investigation of all devices capable of
storing digital data.
 With roots in the personal computing
revolution of the late 1970s and early 1980s,
the discipline evolved in a haphazard
manner during the 1990s, and it was not
until the early 21st century that national
policies emerged.
Digital forensics investigations have a
variety of applications.
 The most common is to support or
refute a hypothesis before criminal or
civil courts.
 Criminal cases involve the alleged
breaking of laws that are defined by
legislation and enforced by the police
and prosecuted by the state, such as
murder, theft, and assault against the
person.
 Civil cases, on the other hand, deal
with protecting the rights and property of
individuals (often associated with family
disputes) but may also be concerned
with contractual disputes between
commercial entities where a form of
digital forensics referred to as electronic
discovery (eDiscovery) may be involved.
 Forensics may also feature in the
private sector, such as during internal
corporate investigations or intrusion
investigations (a special probe into the
nature and extent of an unauthorized
network intrusion).
The technical aspect of an investigation is
divided into several sub-branches related to
the type of digital devices involved:
 Computer Forensics
 Network Forensics
 Forensic Data Analysis
 Mobile Device Forensics
The typical forensic process encompasses the
seizure, forensic imaging (acquisition), and
analysis of digital media, followed with the
production of a report of the collected evidence.
As well as identifying direct evidence of a crime,
digital forensics can be used to attribute
evidence to specific suspects, confirm alibis or
statements, determine intent, identify sources
(for example, in copyright cases), or
authenticate documents. Investigations are
much broader in scope than other areas of
forensic analysis (where the usual aim is to
provide answers to a series of simpler
questions), often involving complex timelines or
hypotheses.
BRIEF DIGITAL FORENSICS
HISTORY OVERVIEW
 In the 1970s, the United States introduced
the 1978 Florida Computer Crimes Act,
which was based on legislation against
unauthorized alteration or deleting data in a
computer system;
 1983 was marked by Canada passing
legislation in the field of cybercrimes and
computer forensics;
 In 1985, Britain created a computer crime
department;
 In 1989, cybercrimes were added to the
official list of crimes in Australia;
 The 1990 Britain’s Computer Misuse Act
made digital forensics well-recognized all
over the world;
 In 1992, Collier and Spaul used the term
“computer forensics” in an academic paper;
 In 2001, Britain created the National Hi-
Tech Crime Unit;
 In 2004, 43 countries signed The
Convention of Cybercrime;
 2005 was marked by the appearance of an
ISO standard for digital forensics.
At present, many scholars and specialists in
digital forensics raise awareness of the issues
the field is facing due to the rapid development
of technologies.
Digital forensic Specialists
 play an important role in the process of
investigation of cybercrimes. Mostly, they
deal with the retrieval of data that was
encrypted, deleted, or hidden.
 The tasks also include ensuring the integrity
of the information that is to be used in court.
At different stages of the investigation,
computer forensics analysts may take part
in interrogating suspects, victims, and
witnesses.
 They also help prepare evidence to be
represented in court.
Private companies cooperate with digital
forensic specialists as well.
Their expertise is also required in personal and
network security, the defense sector, large-
scale financial institutions, and information
technology companies.
Private sector companies hire digital forensics
analysts to prevent or investigate cyberattacks,
security breaches, data leaks, or cyber threats.
Many companies have their departments of
information and cybersecurity.
In many cases, computer forensics specialists
deal with restoring lost data and protecting
sensitive or classified information.
Digital Forensics ensures and supports
cybersecurity in the private sector and assists
law enforcement in investigating criminal cases.
The fast-paced development and
implementation of new technologies in all
areas of human activity require training
computer experts to deal with specific
objectives.
These objectives include:
 Facilitating the recovery, analysis, and
preservation of the data and helping
prepare digital evidence for court
representation;
 Ensuring all the necessary protocols of
gathering evidence as the digital evidence
must not be corrupted;
 Recovering any deleted or hidden data from
any digital devices if the data is
particularly significant for the case;
 Helping identify a suspect and establishing
a motive for a crime;
 Producing a computer forensic report that
prompts the investigation;
 Ensuring digital evidence integrity.
DIGITAL FORENSIC
PROCESS
Like any other branch of applied science,
digital forensics has its protocols and a
structured process. It can be divided into five
stages: identifying, preserving, analyzing,
documenting, and representing steps.
Identification
The first stage implies the identification of
investigation goals and required resources.
The analysts also identify the evidence, the
type of data they deal with, and the devices the
data is stored on. Digital forensics specialists
work with all kinds of electronic storage
devices: hard drives, mobile phones, personal
computers, tablets, etc.
Preservation
At this stage, analysts ensure that the data is
isolated and preserved. Usually, it means that
no one can use the device until the end of the
investigation, so the evidence remains secure.
Analysis
The analysis stage includes a deep systematic
search for any relevant evidence. The
specialists work with both system and user files
and data objects. Based on the found evidence,
the analysts draw conclusions.
Documentation
At this stage, all the found relevant evidence is
documented. It helps to extend the crime
scene and prompts investigation. Any digital
evidence is recorded together with the photos,
sketches, and crime scene mapping.
Reporting
At the final stage, all evidence and
conclusions are reported according to
forensics protocols, which include the
methodologies and procedures of the
analysis and their explanation.
TOOLS USED FOR DIGITAL
FORENSICS
At the early stages of digital forensics
development, the specialists had a very limited
choice of tools used to analyze digital evidence.
It led to multiple allegations that such analysis
might have caused evidence to be altered and
corrupted. Inevitably, there emerged
sophisticated tools designed specifically for
digital forensics analysis.
 Disk and data capture tools can detect
encrypted data and capture and preview the
information on physical drives;
 File viewers and file analysis tools work to
extract and analyze separate files;
 Registry analysis tools get the information
about a user and their activities from the
Windows registry;
 Internet and network analysis tools provide
detailed information about traffic and
monitor user’s activity on the Internet;
 Email analysis tools are designed to scan
email content;
 Mobile device analysis tools help extract
data from the internal and external memory
of mobile devices;
 Mac OS analysis tools retrieve metadata
from Mac operating systems and provide
disk imaging;
 Database forensics tools can analyze and
manipulate data and provide reports of
activities performed.
TYPES OF DIGITAL
EVIDENCE
Digital evidence is any sort of data stored and
collected from any electronic storage device.
Digital evidence can also be retrieved from
wireless networks and random-access memory.
There are many types of electronic evidence
and methodologies of their retrieval, storage,
and analysis. The types of electronic evidence
include but are not limited to the following
examples:
 Media files (photo, video, audio);
 User account data (usernames, passwords,
avatars);
 Emails (content, senders’ and receivers’
information, attachments);
 Web browser history;
 Phone calls (video, audio);
 Databases;
 Accounting program files;
 Windows registry system files;
 RAM system files;
 Any type of digital files (text files,
spreadsheets, PDF files, bookmarks, etc.);
 Records from networking devices;
 ATM transaction logs;
 GPS logs;
 Electronic door logs;
 CCTV cameras records;
 Hidden and encrypted data;
 Printer, fax, and copy machine logs;
 Computer backups.
An Insight into the Layers of the Web
 The World Wide Web is a web of
interlinked HTML pages accessible over
the internet. Technical jargon aside,
imagine it as a network of online content.
 But is the internet the web, or is the web
the internet? No! The Internet is actually
the connection that enables access to
the World Wide Web.
 The web holds far more secrets than
what we can comprehend or perceive.
It contains 3 layers as explained by Data
Scientist, Denis Shestakov, in his iceberg
analogy:
 Surface Web - The visible part of the
iceberg containing all the content that is
indexable by search engines.
 Deep Web - It requires a special
authorization to access it.
 Dark Web - is accessible ILLEGALLY
only using special software and ensures
high anonymity and encryption.
CRIME SCENE DOCUMENTATION
Documenting the entire crime scene is
important because the SOCO does not
want to miss any details or information
that could later prove to be very important
and possibly, the keystone to the entire
crime.
When documenting the scene, there
could be one SOCO or a team that
consists of dozens of CSIS but in either
case, there are certain jobs that must be
done.
These include taking photographs,
drawing sketches, taking notes, and
taking video of the crime scene.
The photographer begins taking
photographs as soon as possible.
The evidence collectors do not touch or
move any evidence where it is located
until it has been identified, photographed,
sketched, measured and recorded.
Documentation is made by the crime
scene investigator for purposes of future
crime scene reconstruction which will
help the prosecutor and the judge
understand the conditions at the crime
scene.
LIMITED TIME OF CRIME SCENE
INVESTIGATION
It must be noted that in some instances,
deteriorating security or environmental
conditions limit the amount of time
available for the investigation of the crime
scene.
While these time limits will not allow for a
thorough crime scene investigation to be
conducted, the following procedure will
maximize the use of the limited time
onsite.
In such circumstances, preparation prior
to staging or entry into the crime scene
area is paramount.
This could include a site survey (e.g., in-
person, photographic, photogrammetric or
videographic) prior to the team's arrival at
the scene or conducting extensive
interviews of any witnesses from the area.
Elements of this preparation and
execution are designed to:
a. Determine the time available to remain
at the crime scene based upon best
knowledge of time- limiting factors.
b. Determine the most critical objective of
being on the site of the investigation, e.g.,
removal of a deceased body,
identification of suspect, collection of
explosive residues, etc.
c. Determine the equipment needed to
fulfill the objective. Prepackage from
established crime scene collection kits a
ready-kit for this specific event.
d. Determine any specialized personnel
that may be needed on scene for this
investigation.
e. Develop a documentation and  bedding frames
collection plan to include:  lamps
 air grates
1. Type and nature of documentation  plumbing and chases
expected.  cell bar attachments, such as to
walls
2. Priority of evidence collection.  trash receptacles
e. Carefully examine materials
3. Responsibility for onsite collection. encountered. Even an item such as a pen
can be modified to be a weapon. Assume
4. Responsibility for evidence custody. nothing is as it first appears.

f. Have custodial staff advise if anything

CRIME SCENE INVESTIGATION IN
appears different or out of place for their
CORRECTIONAL AND CUSTODIAL FACILITIES facility.
CRIME SCENE INVESTIGATION IN
CORRECTIONAL AND CUSTODIAL
FACILITIES

It is worthy to note that investigations

conducted in correctional and custodial
facilities require significant awareness on
the part of the crime scene investigator.

Using the appropriate search

methodology is key to a thorough
investigation. Additional guidance is
provided if the focus of the search is a
place of confinement, e.g., a cell.

a. Use a search method appropriate for

the size of the area of confinement.

b. Consider that evidence could exist or

be placed at higher levels than is typical
in a crime scene. Make sure you look up.

c. Consider that some evidence may be

deliberately covered up. Move layers of
material, looking for potential evidence
underneath.

d. Move material aside and search. In

cells, this includes:

 bedding material
LESSON 14
CRIME SCENE PHOTOGRAPHY
Photographs are another major part of
scene documentation. Before anything
is touched or moved, there must be a
picture taken of it.
This is so that later when the SOCO is
analyzing the crime scene, they will be
able to see exactly what it looked like.
The SOCO will take three different kinds
of pictures:
Overviews
 will be taken of all rooms pertaining
to a crime scene, meaning that if
the crime scene is a bedroom in a
house all the rooms in the house
will be photographed.
 When the rooms are photographed
a picture will be taken from each
corner.
 The outside of the building will also
be photographed, and each
entrance and exit will also be
photographed.
 Often the onlookers that have
gathered will also be photographed
so that investigators can later
identify witnesses or possible
suspects.
Mid-view
 photos will show evidence in
context so not only the piece of
evidence will be shown but also
what was lying near it and around it.
Close-ups
 are taken of individual pieces of
evidence so that blood spatters
may be shown and things like serial
numbers can be documented.
 Photographs are then documented
into the photo log along with
information such as the location of
the object, the description, and the
time and date to name just a few.
 The main objective of photography
is to create an accurate objective
visual record of the crime scene
before any item is moved or
removed.
 1. The crime scene photographer
will enter the crime scene and take
a photograph of the crime scene
from general to specific
(Progression Principle).
 Photograph should show a general
view of the front and back of the
crime scene, entrance and exit at
the crime scene, the possible
entrance and exit used by the
perpetrator/s.
 2. The next photograph is a
medium view of the entrance and
exit at the crime scene (indoor), the
possible entrance and exit used by
the perpetrator/s.
 An overlapping view of the
immediate crime scene, if possible,
take a top view photograph of the
crime scene.
 The next round of photograph on
this overlapping view will be taken
after putting marker/tags on the
evidence with individual close-up
photograph of the physical
evidence and another round after
collecting all the physical evidence.
 3. Close-up photograph of physical
evidence. A second round of
photograph after the search that
include exhibit number.
 4. Additional close-up photograph
will be taken with a scale beside the
 evidence that helps in determining
its size.
PURPOSE OF CRIME SCENE PHOTOGRAPHY
The following are the purposes of
photographing the crime scene:
1. To record the original scene and
related areas.
2. To record the initial appearance of
physical evidence.
3. It will provide investigators and others
with this permanent visual record of the
scene for later use.
4. Photographs are also used in court
trials.
ADMISSIBILITY OF PHOTOGRAPHIC EVIDENCE
1. Three major points of qualification
of a Photograph in court
a. Object pictured must be material or
relevant to the fact in issue.
b. The photograph must not appeal to the
emotions or tend to prejudice the court or
jury.
c. The photograph must be free from
distortion and does not misrepresent the
scene or the object it purports to
reproduce.
2. You do not need to be an expert in
photography to take crime scene
photographs or testify about them, it is
enough that you are properly trained in
the proper taking of photographs in
the crime scene.
GUIDELINES FOR TAKING PHOTOGRAPHS OF
A CRIME SCENE
GUIDELINES FOR TAKING
PHOTOGRAPHS OF A CRIME SCENE
The following are the guidelines for
taking photographs of a crime scene:
 Photographs of a crime scene
should be taken as soon as
possible, before note taking,
sketching or a search for evidence
begins.
 The pictures should illustrate the
original, uncontaminated condition
of the crime scene.
 Photographs should be taken of the
crime scene only, without
spectators or police personnel.
 To adequately present the crime
scene initially, the photographs
must form an organized sequences
and show all relevant locations and
objects.
 The crime scene photographs must
progress from general to specific.
GENERAL CRIME SCENE PHOTOGRAPHY
A. Photograph is one of the methods
of recording a crime scene.
Photograph is the best companion of:
1. Field notes; and
2. Sketches
B. Photographs
1. What photographs can show
2. What photographs do not show
C. Five steps in recording the
crime scene.
The following are the basic steps in
recording the crime scene:
1. Secure the scene
2. Take preliminary notes
3. Take overview photographs
4. Make a basic sketch
5. Record each item of evidence
D. Taking overview photographs.
1. Purpose
a. To show the scene exactly as it was
when you first saw it.
If something was moved before you
arrived, don't try to reconstruct the scene
as it was.
The photographs should show the scene
as you found it, this means that the crime
scene should be photographed in its
original position.
2. Major crime photography
a. First discuss the crime, evidence and
photographs needed with other
investigators at the scene.
b. Be careful not to destroy any evidence
while taking the photographs.
c. Outside the scene.
 Exterior of the building where the
crime occurred and, in some cases,
the whole locale.
 Aerial photographs of the scene
and the surrounding area can be
useful in some types of cases.
 Original series of photographs
should also show all doors,
windows and other means of
entrance or exit.
d. Inside the scene
 Begin with a view of the entrance.
 Then photograph the scene as it
appears when you first step into the
room.
 Next, move around the room to get
photographs of all the walls.
 These photographs should also
show the positions of any potential
items of evidence.
 Include photographs of other rooms
connected with the actual crime
scene.
3. Using video to record the crime
scene
a. Frequently valuable to show an
overview of the scene.
E. Photographs to record items of
evidence.
1. Take two photographs of each item of
evidence
 One should be an orientation
(midrange) shot to show how the
item is related to its surroundings.
 The second photograph should be
a close-up to bring out the details of
the object itself.
2. Measuring and marking devices
a. Take two photographs if a marking or
measuring device is used.
(1) One photograph without the device,
the other with the device
(2) So, the defense can't claim that the
scene was altered or that the device was
concealing anything important
THE ADMISSIBILITY OF DIGITAL
PHOTOGRAPHS IN COURT
When digital imaging is considered for
law enforcement, the concern of the
admissibility of digital photographic
evidence in court is often raised.
The fact that digital photographs are more
easily altered than film-based
photographs is usually cited.
Some even believe digital photographs
are not admissible in court.
CRIME SCENE SKETCHES
Sketches are prepared to indicate exact
location of objects and its relationship to
each other and other objects at the crime
scene.
Sketch is a useful tool in questioning
suspects and witnesses as well as in the
writing of investigative reports.
Sketches are excellent companions to
photograph.
Where photographs provide exact details,
sketches offer accurate information about
the placement of objects, and they show
relationship and distances between things.
Sketches are often used at crime scenes
as well in addition to photographs
because they can cover such a greater
area than photographs.
Where a photograph will only be able to
show one room at a time, sketches can
depict an entire home's layout and how
certain pieces of evidence relate to each
other.
Video is also used at crime scenes, not
only to catch pieces of evidence and give
investigators a better understanding of
the scene. but also, so that it can be
analyzed how long it takes to get from
room to room and how many turns it
takes to get from one room to another.
The crime scene sketch is an invaluable
aid in recording investigative it is a
permanent record that provides suppl
information that is not easily
accomplished with the exclusive use of
crime scene photographs and notes.
A crime scene sketch depicts the overall
layout of a location and the relationship of
evidentiary items to the surroundings.
It can show the path a suspect or victim
took, and the distances involved. It can be
used when questioning suspects and
witnesses.
During trial, the crime scene diagram
correlates the testimony of witnesses and
serves as a tool for relaying reference
and orientation points to the prosecutor,
judge and jury.
E. Ruler for drawing straight lines,
drawing to scale, and making very short
measurements.
MAIN TYPES OF CRIME SCENE SKETCH
The following are the main types of
Crime scene sketch:
(a) Rough Sketch
A rough sketch is drawn free hand by the
sketcher at the crime scene. Changes
should not be made to it after the
sketcher has left the crime scene.
This sketch will not normally be drawn to
scale, but will indicate accurate distances,
dimensions, and relative proportions.
(b) Smooth / Finished Sketch
A smooth or finished sketch is one that is
finished and is frequently drawn to scale
from the information provided in the rough
sketch.
If a sketch is drawn to scale, the numbers
concerning the distances can be
eliminated. However, if the sketch is not
drawn to scale, the distances need to be
shown.
Types of Crime Scene Sketch
The following are the different kinds/types
of crime scene sketch:
(a) Location/Neighborhood sketch
 This type of sketch is used to
document important items within a
large scene involving a large tract
of land and/or many buildings.
 The sketch can show the location of
evidence and its relationship to the
overall scene, the relationship of
each building to one another the
location if major vegetation, fences
street signs, path of egress used by
the suspects, the location of
witnesses in relation to the scene.
(b) Floor Plan/bird's eye view sketch
(also known as Overview sketch)
 This type of sketch is the simplest
and most common one used in
diagramming crime scenes.
 It may be used in nearly all crime
scene situations where the relevant
items are located in one place.
 This type of sketch is also the
easiest for the judges, prosecutors,
and trial lawyers to comprehend.
(c) Exploded sketch/Cross projection
sketch
This type of sketch uses the combination
of the floor plan and the four elevation
views (the walls) of a room. The walls and
ceiling are drawn as if they are folded out
with the ceiling placed on one of the walls.
The purpose of this type of sketch is to
show points of interest on the walls,
ceiling and floor.
(d) Elevation Sketch
The elevation sketch depicts a side, front,
or rear of the exterior of a structure or one
of the interior walls in a room used when
the vertical, rather than horizontal plane is
of interest. Thus, if bloodstains were
present on a wall of the house, the
elevation drawing of the wall would be
used to depict the scene.
EXAMPLE OF CRIME SCENE SKETCH 4. This rough sketch may be used to
FIGURE OF CRIME SCENE complete a scaled diagram later.

Sketching the Crime Scene 5. These diagrams should be clearly

Before beginning a sketch, obtain a
comprehensive view of the scene.
Determine the sketch limits - decide what
to include and what to exclude. If the
scene is complicated, a number of
sketches may be necessary for adequate
documentation.
To Scale or Not to Scale
A. Drawn to Scale" diagrams.
marked Not to Scale.
SKETCH EQUIPMENTS
The following are the basic equipment in
sketching:
A. Supply of writing implements - pencils
may be used for the overall sketch. A sketcher
may choose to use red pencils to denote.
B. Blank paper - graph paper, while not
essential, simplifies scale drawing.
C. Drawing surface such as a clipboard.

. To avoid a distorted view of the scene,
measurements must be reduced in
proportion so that they bear correct
relationship to each other.
2. Select the scale of the diagram by
fitting the longest dimension in the scene
to the area of the paper being used.
3. Graph paper should be used when
creating this type of sketch.
Each block represents a specified length
of measurement. Use convenient units for
the scale (one block 1 foot).
D. Measuring devices - tape measures are
the most common tool used and should be at
least 50 to 100 feet long. Other measuring
devices may include a surveyor's wheel, a
laser rangefinder, or a Total Station. GPS
coordinates may be useful in locating an
outdoor scene.
E. Ruler for drawing straight lines, drawing to
scale, and making very short measurements.
F. Graph paper should be used when this type
of sketch. creating each block represents a
specified length of measurement. Use
convenient units for the scale (one block 1 foot).

B. "Not to Scale" diagrams

1. Sketch can be accomplished more

quickly than a scaled diagram.

2. Items are placed in the diagram based

on approximation. This type of diagram
may provide a distorted view of the scene.
Correct proportions and relationships
between objects may not be maintained."

3. Measurements are recorded on the

sketch or in a chart.
LESSON 15
FAMOUS PERSONALITIES IN THE HISTORY OF
LEGAL MEDICINE
Imhotep (2980 B.C)
 earliest recorded medico-legal
expert.
 Chief physician and architect of
King Zoser.
Antistius
 first police surgeon or forensic
pathologist and performed the
autopsy in the body of Julius
Ceasar.
 (23 wounds and only 1 penetrated
the chest cavity. between first and
second ribs).
Paulus Zachias (1584-1659)
 a papal physician regarded as the
father of forensic medicine.
Mathieu Joseph Bonaventure Orfila
 Spanish toxicologist and chemist
 founder of modern toxicology.
 In his Traite' de Poison, he
mentioned mineral, vegetable and
a*** poison in relation with
physiology, pathology and legal
medicine.
Dr Rafael Genard y Mas- 1858
 the first medical textbook including
pertinent instruction related to
medico-legal practice, Spanish
physician.
 In 1871, teaching of legal medicine,
included as an academic subject in
the foundation of the School of
Medicine of the Real y Pontifica
Universided de Santo Tomas.
The first textbook in legal medicine was
included in the Constituto Criminalis
Carolina which was promulgated in 1532
during the reign of Emperor Charles V in
Germany.
Ambrosio Pare (1575)
 considered legal medicine as a
separate discipline and he
discussed in his book, abortion,
infanticide, death by lightning,
hanging, drowning feign disease
distinction between ante mortem
and postmortem wound and
poisoning by carbon monoxide and
corrosives.
LEGAL MEDICINE
LEGAL MEDICINE
Part of Criminalistics which is now
incorporated to Special Crime
Investigation
Legal Medicine
 is a branch of medicine which deals
with the application of medical
knowledge to the purpose of law
and in the administration of justice.
 It is interactions of medicine and
law.
 the main objective in the practice of
legal medicine is to seek for the
truth.
 presumption of theories has no
place in the practice of legal
medicine.
 forensic pathology plays a big role
in the practice of legal medicine for
its ideal with the examination of the
dead.
  Legal medicine, forensic medicine,
medical jurisprudence is
synonymous- this concept is under
Anglo-American influence.
 Any physician who specializes in
the field of legal medicine and
represent these cases in any court
of justice is considered to be
practitioner of legal medicine.
Cases to be Autopsied
1. Death due to criminal violence.
2. Death due to accident.
3. Suicidal deaths.
4. Sudden unexpected deaths.
5. Deaths unattended by physician, Dead
on arrival at clinic and hospital
6. Death under suspicious manner.
Forensic
 denotes anything belonging to the
court of law or used in court or legal
proceedings or something fitted for
legal or public argumentation.
AUTOPSY VS POSTMORTEM EXAMINATION
AUTOPSY VS POSTMORTEM
EXAMINATION
Autopsy
 is a comprehensive study of a dead
body, employing recognized
dissection procedure and
techniques, to know the cause of
death (manner of death).
 examination of dead body through
dissection carried out by a trained
physician.
Two (2) types of Autopsies:
Hereunder are the two (2) types of
autopsies:
1. hospital or non-official
 the cause of death is known.
 it is done to confirm diagnosis for
teaching and research purposes.
2. medico-legal or official
 is performed to identify the cause of
death.
Postmortem examination
 refers to external examination of a
dead body without incision being
made, although blood and other
body fluids may be collected.
 the external examination of the
dead body by ocular inspection.
DEATH
 is the termination of life.
 It is the complete cessation of all
the vital functions without possibility
of resuscitation.
Importance of death determination
1. personality of a person is extinguished
by death
2. criminal liability is extinguished by
death
3. property of a person is transmitted to
heirs or nearest of kin
4. basis of immediate removal of organs
for transplantation
5. civil case for claim is dismissed
Kinds of Death
Hereunder are the kinds of death:
a. Somatic or Clinical Death
 it is a complete, continuous and
persistent cessation of respiration,
circulation and almost all brain
function of an organism.
b. Molecular or Cellular death
 after cessation(stoppage) of the
vital function of the body there is
still a*** life among individual cells.
Presence of excitability of muscles.
c. Apparent or State of Suspended
Animation
 this condition is not really death but
merely a transient loss of
consciousness or temporary
cessation of the vital function of the
body on account of disease,
external stimulus. (hysteria, uremia,
catalepsy, electric shock)
SIGNS OF DEATH
SIGNS OF DEATH
The following are the different signs of
death:
a. Cooling of the body (ALGOR
MORTIS)
 it is rapid during the first two (2)
hours.
 a fall of 15-20 degrees Fahrenheit.
Postmortem Caloricity
 is the rise of temperature of the
body after death due to rapid and
early putrefactive changes or some
internal changes.
 first two hours after death.
b. Postmortem rigidity (cadaveric
rigidity, death stiffening, death
struggle of muscles or Rigor mortis)
or stiffening of the body, is due to the
disappearance of adenosine triphosphate
from muscle.
 may last for 24 to 36 hours
 starts from 2 to 4 hours and fully
developed in 6-12 hours.
c. Postmortem lividity or cadaveric
lividity or postmortem suggillation
or postmortem Hypostasis or livor
mortis
is a reddish-purple coloration in
dependent areas of the body due to
accumulation of blood in the small
vessels of the dependent areas
secondary to gravity.
Presence of Foods in the stomach:
Generally, food remain in the stomach for
3 to 4 hrs.
 light meal: 1 ½-2
 medium meal: 3-4
 heavy meal: 4-6 hours.
Stages of Decomposition:
The following are noticeable during the
different stages of decomposition:
a. Fresh (1-2 days)
b. Bloated (2-6 days)
c. Decay (5-11 days
d. post-Decay (10-24 days)
e. Dry Stage (24+ days)
LESSON 16
PHYSICAL INJURY
Physical Injury
 is the effect of some forms of
stimulus on the body.
 Causes of Physical Injury:
 Hereunder are the causes of
Physical Injury:
 1. Physical violence
 2. Heat or cold
 3. Electrical energy
 4. Chemical energy
 5. Radiation
 6. Change in atmospheric pressure
 7. Infection
CLASSIFICATION OF PHYSICAL INJURY
The following are the classifications of
Physical injury.
1. Contusion (also known as bruise)
 is the effusion of blood into the
tissues underneath the skin, as a
result of blunt force or violence.
 Noticeable Colors of the Injury in
relation to number of hours or
days after infliction:
The following are the noticeable colors of
the injury from the time of infliction:
a. Red-fresh
b. Blue-after few hrs to 3 days,
c. Bluish black/brown-4th day,
d. Green-5to7 days,
e. Yellow-7to12 days,
f. Normal 2 weeks.
2. Hematoma (also known as blood
cyst, blood tumor)
 is the effusion of blood in a newly
formed cavity.
 is a collection of blood, usually
clotted, outside of a blood vessel
that may occur because of an injury
to the wall of a blood vessel
allowing blood to leak out into
tissues where it does not belong.
 The damaged blood vessel may be
an artery, vein, or capillary, the
bleeding may be very tiny, with just
a dot of blood, or it can be large
and cause significant blood loss.
LOCATION OF INJURY IN RELATION TO THE
SITE OF APPLICATION OF FORCE
a. Coup Injury- Physical injury located at
the site of the application of force.
b. Contre-Coup- opposite the site of the
application of force.
c. Coup contre-coup- located at the site
and also opposite the site of application of
force.
. Locus minoris Resistencia- not at the
site nor opposite site, but in the area of
least resistance.
FIREARM
Firearm
 is an instrument used for the
propulsion of a projectile by the
expansive force of gases coming
from the burning gunpowder. It can
be a revolver, pistol, rifle r shotgun.
 Low velocity - 1400 feet per second
 High velocity - 1400, 2200-2500
feet per second
 The Medico-Legal Officer can
assist in the following:
 1. Direction and range of fire
 2. Type of weapon
 3. Position of the victim
 4. Direction of the bullet and organs
involved
 Movements of the bullet as it
moves out of the muzzle.
 1. forward
 2. spinning
 3. tumbling
 4. wabbling
 5. pull of gravity