The Branches of Forensic Science: A Map

The legal system asks a deceptively simple question in every case: what happened? That question splinters into dozens of technical sub-questions the moment investigators arrive at a scene. How long has this person been dead? What substance is in this powder? Did this document originate from the same printer as this other one? Was this fire accidental or set? No single scientific discipline answers all of them, so forensic science grew by borrowing methods from existing sciences and adapting them to courtroom standards.

Each branch crystallised around a recurring type of question. Forensic toxicology grew out of the need to identify poisons after suspicious deaths. Fingerprint science developed when anthropometric systems proved inadequate for reliable personal identification. Questioned-document examination formalised because fraud and forgery demanded technical scrutiny of handwriting and printing. Digital forensics appeared almost overnight when computers became the primary medium for both crime and communication.

There are several ways to carve up the forensic disciplines. The taxonomy used here groups them by the kind of knowledge they draw on and the kind of question they answer. It is not the only valid grouping, but it is the most intuitive for someone encountering the field for the first time.

Consider a road-traffic fatality where foul play is suspected. The forensic pathologist performs the autopsy and determines cause of death. The forensic toxicologist screens blood and urine for alcohol and drugs. The trace examiner recovers paint and glass from the victim's clothing. The digital investigator downloads the vehicle's event data recorder. A questioned-document examiner may be called if the vehicle's service records are suspected of having been altered.

None of those specialists trespass on the others' turf. They each answer their piece of the puzzle independently, then their reports are assembled by investigators and presented to a court. The coordination is administrative and legal, not scientific. The science stays within each discipline's validated methods.

1. Scene and physical evidence
   Lab sciences (trace, biology, chemistry) process physical material recovered from scene, victim, and suspect.
2. Body and person
   Medical sciences (pathology, toxicology, anthropology) examine the human body to establish cause, manner, and timing of death or injury.
3. Records and devices
   Technical sciences (digital, documents, ballistics) recover and interpret recorded information from devices, paper, and physical systems.
4. Coordinated report
   Each specialist's findings are compiled into a case file. Where disciplines overlap (toxicology informing pathology, or digital evidence corroborating physical trace), the cross-referencing is done by investigators, not by the scientists themselves.

The branch map is not static. Forensic genomics now goes well beyond STR profiling: phenotyping from DNA can produce a probabilistic description of appearance, and genealogical databases have opened a tool called investigative genetic genealogy, used in cold-case identification. Forensic accounting grew into its own specialism as financial crime scaled. Forensic linguistics analyses authorship, ransom notes, and online communication for source attribution.

At the edges, hybrid specialists are emerging. A digital pathologist combines imaging technology (CT, MRI) with classical post-mortem examination. A forensic data scientist applies statistical modelling to patterns in large crime datasets. These hybrids do not replace the classical branches; they extend them into territory the original methods cannot cover.

• Forensic genomics / investigative genetic genealogy: DNA databases used to identify unknown remains or cold-case suspects through extended family matching.
• Forensic accounting: tracing financial flows in fraud, money laundering, and corruption cases.
• Forensic linguistics: attributing authorship or analysing language in disputed texts, ransom communications, and online evidence.
• Virtual autopsy (virtopsy): CT/MRI imaging as a supplement or alternative to traditional dissection, common in jurisdictions with religious restrictions on autopsy.
• Forensic meteorology: weather data and records as evidence in insurance, aviation, and liability cases.

Every forensic branch operates within a quality framework that links laboratory practice to courtroom admissibility. In the United States, the Daubert standard (established in Daubert v. Merrell Dow Pharmaceuticals, 1993) requires that expert testimony be based on a method that is testable, peer-reviewed, has a known error rate, and is generally accepted in the relevant scientific community. In England and Wales, the Forensic Science Regulator publishes Codes of Practice that set mandatory quality standards for each branch.

Laboratory accreditation bodies such as UKAS (UK), A2LA and ASCLD (US), and NABL (India) assess forensic labs against international standards, primarily ISO/IEC 17025 for testing and calibration laboratories. Accreditation is branch-specific: a lab may be accredited for DNA analysis but not for questioned documents, so the scope of any accreditation certificate matters when evaluating a report.

The three topics that follow this one each take one of the clusters apart in detail. The lab sciences topic covers forensic biology and DNA, forensic chemistry (drugs, explosives, fire debris), and forensic physics and trace examination (glass, soil, paint, marks). The medical and behavioural topic walks through pathology, toxicology, anthropology, odontology, entomology, and forensic psychology. The technical and applied topic covers digital forensics, questioned documents, fingerprints and biometrics, ballistics, and forensic engineering.

The purpose of this map is to give the detail topics a home. When you read that forensic toxicology studies metabolites in blood, you will know it sits in the medical cluster and collaborates with pathology. When you read that a digital investigator uses write-blockers to preserve disk state, you will know that sits in the technical cluster and shares chain-of-custody logic with the lab sciences. Context is what makes the specifics stick.