At the Information Technology Section we work with information carriers of all types, from examinations of writing, documents and banknotes to technical examination of data, sound and images.
In a unique 3D model, NFC has recreated the suspected terrorist's drive with the truck along Drottningatan during the terrorist attack on April 7, 2017. Bild: Maria Åsén, NFC
Recreation of deleted or damaged video material. Bild: Maria Åsén, NFC
During an image comparison images from a surveillance video may be compared with other images in order to determine the identity of the person on video. Bild: Ellinor Algin, NFC
By means of different softwares the forensic experts at NFC may filtrate and enhance inaudible noice into audible recorded speech or sounds. Bild: Maria Åsén, NFC
An UAS - Unmanned Aerial Vehicle – with addition of av camera, may be used to document crime scenes. Bild: Jason Mellström, NFC
Examination of hand writing. Bild: Lars Hedelin, Kommunikationsavdelningen
Investigations of questioned documents, as for example passports or bank notes, are carried out at the Information Technology Section. Bild: Maria Åsen/NFC
When exposed to UV light different security features in passports and banknotes become visible. Bild: Elin Bågviken, NFC
Information Technology Section
- Completed cases: 2,100 (2018)
- Employees: 68 (December 2018)
In the field of computer forensics NFC carries out acquisition of information that will be used in complex analysis, or where the storage media is corrupted and therefore needs to be repaired in order for data to be accessible. Data analysis includes complex investigations where the questions are complex and/or the data volume is very large. This places high demands on the equipment in the form of servers for processing data and storage space.
Mobile Phone Forensics
The activities in the field of mobile phone forensics are mainly focused on acquisition and interpreting data from heavily damaged or locked mobile phones. These types of cases are still increasing. The work requires expertise on various phone models and how they can be investigated. Almost all mobile phone models must be handled in their own way. Acquisition is often done through so-called chip-off, i.e. directly from a desoldered memory chip. It is necessary to have a variety of tools to perform these investigations. A collaborative project between different competencies and actors has been launched to counteract the growing problems of extracting information from mobile devices.
Due to the high availability of mobile devices and increased deployment of camera based surveillance systems; video evidence is becoming increasingly important in the investigation of many crimes. Video evidence can often give clues about activities, places and persons/objects of interest that many other types of evidence cannot. Thus, information obtained from video can be used to shed light on spatial and temporal relations between other evidence objects. This can also be used to direct investigation efforts by clarifying the circumstances surrounding the commission of a crime.
The most frequent case work includes image comparisons, height measurement in images, camera identification based on PRNU, recovery of image and video files, authenticity, audio enhancement and voice comparisons. One project during the year has focused on automatic classification of recovered images as valid or invalid by using convolutional neural network. The new method outperformed the others.
Even though our daily lives are becoming more digitized, the number of cases including banknotes, ID documents and handwriting are increasing. Questioned document examination is often important to tie a person to a crime. A questioned document can for instance be a letter, notes, driver’s license or other document whose authenticity is disputed. During the year, our international commitment has been expanded and involves both projects and educational efforts. The experiences made have been nationally applied.