Vehicle Systems Forensics examinations often raise questions about the type of documentation or reporting you can expect. Here's how our process typically works which is a two stage process.
STAGE 1
Firstly, it's important to recognise that vehicle data can originate from various sources and be accessed through different examination methods. The approach depends on the specific type of data being sought, where it is likely stored within the vehicle, and the tools and techniques available to retrieve and analyse it.
When conducting a Vehicle Systems Forensic examination, we begin by locating and checking for the relevant data, either directly from the vehicle or from its individual components after removal, depending on the specific request.
The Vehicle Systems Forensic examination is documented using an internal digital notes application that records all activities with date and time stamps to ensure integrity. These notes include photographs and provide a comprehensive log of the activities performed during the examination including the removal of components. In some instances, they may also contain investigative data from the vehicle that investigators can view in a timely manner once the examination is complete to facilitate fast track actions.
These notes are not designed as evidential products, they ensure transparency, facilitate review of the procedures at a later stage, and enable the production of accurate reports if needed.
Once the data is acquired either from the vehicle itself or from its components following removal, we create a preliminary findings report. This report outlines the scope of the examination, the methods used, and the data recovered. It is then shared with the investigator, who reviews it to determine its relevance and potential value to their investigation.
In Criminal Justice Cases, we align with the Streamline Forensic Reporting (SFR) process by using an MG22a form. This standardised document follows national guidelines and allows us to report our initial findings concisely and consistently in that arena. In Civil cases we report these findings in accordance with the clients' requirements.
If the data is reviewed and deemed irrelevant to the investigation, it is categorised as unused material and recorded and retained accordingly on a disclosure schedule.
STAGE 2
However, if the data is of evidential value, we need clarity on which aspects are significant and what conclusions are being drawn from the data. This ensures our findings align accurately with what the data genuinely represents. It's important to note that Vehicle Systems Forensics is still an emerging field. Our understanding of the data and the tools used to analyse it is evolving. While some systems are well researched, others may be examined for the first time during an investigation. In such cases, verifying the data's accuracy and its meaning might require additional testing to confirm our interpretations or inferences and understanding any data limitations.
Evidential reporting requirements vary depending on local practices. Some areas accept Streamlined Forensic Reports, while others request formal statements or detailed expert reports. For more comprehensive statements or expert reports compliant with Part 19 of the Criminal Procedure Rules, the process can become time intensive and subsequently costly. The level of effort required depends heavily on the data volume and complexity. For instance, reporting on three days of GPS vehicle movements is far more involved than documenting a single device connection to an infotainment system.
In summary, our process begins with obtaining the data to determine its relevance and whether any of it is intended to be evidential. If so, we assess whether we are satisfied with the evidential value ensuring that the inferences drawn from the data are accurate or that its limitations are understood. The specific evidential product required, whether further SFR forms, statements, or expert reports, will depend on the needs of the individual case.