Practice with national-level exam (FACT, FACT Plus, NET, CUET, etc.) mocks, learn from structured notes, and get your doubts solved in one place.
The bench every defensible fire and explosives examination opinion rests on: sealed metal evidence cans (the unlined paint-can standard) and nylon evidence bags for fire debris, headspace integrity discipline that prevents accelerant escape during transport, sampling kits for explosive residue swabs (cotton applicators + isopropanol or methanol pre-wetting per ASTM E2998), GC-MS and LC-MS configurations for accelerant and explosives analysis, ion mobility spectrometers for trace detection, evidence packaging for fragments and IED components, and the chain-of-custody log that keeps an examination defensible when challenged in cross-examination years after the incident.
Last updated:
The most technically accomplished laboratory analysis in fire or explosives investigation is worthless if the evidence submitted for analysis was improperly collected, stored in the wrong container, contaminated during transit, or tracked through a chain-of-custody log with gaps. Courts across jurisdictions, from the Crown Court in England to the sessions court in a Maharashtra district to the federal district court in Delaware, have suppressed or heavily discounted fire debris and explosive residue findings where the evidentiary chain was broken or the containers showed signs of compromise.
The choice of container is not a minor logistical detail. Unlined metal cans (the standard evidence container for fire debris) exist because plastic bags are permeable to volatile organic compounds: gasoline residues will migrate through a polyethylene bag and be undetectable after 24 hours at room temperature, while the same residues will survive weeks in a sealed metal can. Activated charcoal swabs for explosive residue collection exist because cotton without pre-wetting and appropriate solvent contact will adsorb and retain residue inconsistently, introducing false-negative results. These choices are encoded in ASTM standards and validated in peer-reviewed research; they are not arbitrary preferences.
This topic covers the physical equipment, containment systems, sampling protocols, analytical instrument configurations, and chain-of-custody documentation that govern fire debris and explosive residue evidence from scene collection to the laboratory report.
The container is the first analytical instrument in fire debris investigation. A wrong choice at the scene eliminates any possibility of a correct answer in the laboratory.
The primary evidence container for fire debris is the unlined metal paint can, typically a standard one-quart (approximately 950 ml) or one-gallon (approximately 3.8 litre) friction-lid can without internal lining. "Unlined" is the operative requirement: some commercial metal cans have a plastic or epoxy internal coating to prevent corrosion. This lining can contribute volatile organic compounds to the headspace and produce chromatographic artefacts that mimic, partially overlap with, or suppress ignitable liquid residue signals. The forensic standard (referenced in ASTM E1459, the Standard Guide for Physical Evidence Labeling and Related Documentation) requires cans manufactured specifically for forensic fire debris collection, verified to be free of internal coatings and pre-contamination.
New cans must be verified clean. The standard verification procedure is to heat-sample a batch of cans from each shipment: seal each test can, heat to the operating temperature (60 to 70°C), and analyse a blank headspace extract by GC-MS. Any chromatographic signal in the retention window of the target ILR compound classes fails the can lot. This verification is documented, and the lot number is recorded in the chain-of-custody log alongside the exhibit number when a can from that lot is used in casework.
The friction lid (also called the press-on lid or snap-on lid) seals against the can rim by a friction fit, not by a twist mechanism. This design allows field personnel wearing gloves to apply and remove the lid without tools, and it allows laboratory personnel to open and reseal the can during analysis without mechanical damage that would compromise the evidence log. Once sealed at the scene, a tamper-evident sticker is applied across the lid-can interface: any disturbance of the sticker is visible and documented.
Nylon bags (specifically nylon rather than polyethylene, polypropylene, or other common plastic films) are an alternative for fire debris that cannot fit into a can: large items of building material, upholstered furniture sections, soil samples from outside pour-point areas, or wet debris from suppression operations. Nylon has significantly lower permeability to volatile hydrocarbons than polyethylene: research published by Stauffer, Dolan, and Newman (Elsevier, 2008) in Fire Debris Analysis demonstrated that gasoline-spiked wood samples stored in nylon bags retained detectable ILR levels at 24-48 hours that were undetectable in polyethylene bags after the same period. However, nylon bags are not as protective as metal cans over extended storage periods, and ASTM E1459 recommends metal cans as the primary container wherever the sample volume permits.
For explosives cases, plastic evidence bags (tamper-evident polyethylene) are commonly used for bulk explosive material and intact device components that pose no chemical stability concern; metallic components and circuit boards are packaged in anti-static bags with physical padding to prevent fragment damage. Unstable peroxide-based explosive residues (TATP, HMTD) require cold storage and documented thermal management because these compounds are volatile and degrade at ambient temperatures.
The compounds a fire examiner is looking for are volatile by definition. Anything that allows them to escape before the laboratory opens the can destroys the evidence.
Ignitable liquid residues are volatile organic compounds by definition: they form flammable mixtures with air, which is precisely what makes them dangerous as accelerants. This volatility is also what makes them analytically detectable by passive headspace concentration. But it also means they will migrate out of any container that is not properly sealed, and they will be lost to the atmosphere or adsorbed onto porous container materials if the container is inappropriate.
The headspace in a sealed evidence can is the gas phase above the debris material. At room temperature, the volatility of ILR compounds drives a partition equilibrium between the liquid or adsorbed phase (in the debris) and the gas phase (the headspace). When the can is heated in the laboratory oven to 60-70°C, the vapour pressure of the ILR compounds increases, enriching the headspace and driving efficient adsorption onto the charcoal strip. The entire PHC extraction method depends on this headspace being sealed and intact from the scene to the laboratory oven.
Four conditions compromise headspace integrity. First, an improperly seated friction lid: if the lid is not fully seated around the entire circumference, the seal is incomplete and volatile compounds escape. The field protocol requires the investigator to press the lid firmly with both palms at multiple points around the rim, and to check the seal by attempting to lift the lid without a tool. Second, overfilling the can: a can filled more than two-thirds of its volume with wet or tightly packed debris compresses the headspace, reduces the volume available for equilibration, and may cause the lid to unseat if the debris expands or gas pressure builds during storage. ASTM E1459 recommends filling to approximately two-thirds capacity. Third, excessive storage time before analysis: even properly sealed cans show some headspace loss over extended periods. Laboratory SOPs (and ISO 17025 method validation requirements) specify the maximum storage period before analysis. ASTM E1460 (Standard Practice for Choosing Solvents for Extraction of Residues from Fire Debris and Storage of Extracts) addresses stability of extracts; the storage of unextracted debris should follow the laboratory's validated time limit, typically 30-60 days. Fourth, thermal extremes during transport: high ambient temperatures (transport in a vehicle boot in summer) accelerate evaporative loss; freezing temperatures can damage can seals. Most laboratory SOPs specify that debris cans should be stored and transported between 4°C and 25°C.
In the UK, the Forensic Science Regulator's Codes of Practice for fire investigation evidence handling require documented storage conditions with temperature log for fire debris exhibits. In the US, the FBI's Evidence Management Policy Unit guidelines specify chain-of-custody documentation that includes storage condition records. In India, CFSL SOPs for fire debris evidence handling specify ambient temperature storage and the maximum period between collection and receipt by the laboratory; compliance is verified at the evidence receipt examination stage, which is documented in the case record.
A dry cotton swab dragged across a metal surface may collect explosive residues. It may also not. The ASTM E2998 protocol exists to remove the 'may not' from that sentence.
ASTM E2998: Standard Guide for Sampling Improvised Explosive Devices and Post-Blast Debris for Explosive Residue Analysis defines the protocols for collecting surface swabs and bulk samples for energetic residue analysis. It is the primary analytical reference for this sampling type in the US and is referenced by ENFSI EWG best-practice manuals for post-blast sampling across EU jurisdictions.
The fundamental principle of E2998 sampling is that explosive residue is present on post-blast surfaces in very small quantities (nanogram to microgram per unit area), often distributed non-uniformly, and is subject to rapid loss through volatilisation, weathering, and physical disturbance. Effective sampling maximises residue recovery while avoiding contamination.
The swab material specified by ASTM E2998 is cotton. Cotton fibre has a relatively high affinity for the polar organic compounds in common explosive classes (nitrate esters such as PETN and NG, nitroaromatics such as TNT, and some inorganic oxidisers) compared to synthetic fabrics. The pre-wetting step is critical: a dry cotton swab dragged across a surface removes some residue but also leaves significant residue behind and may generate static that prevents residue transfer. Pre-wetting with isopropanol (2-propanol, approximately 70% v/v in water) or methanol (approximately 70% v/v in water) performs three functions. It dissolves surface-adsorbed residues, increasing recovery. It eliminates static attraction, allowing the wetted swab to make full surface contact. It provides a solvent vehicle that is directly compatible with subsequent LC-MS analysis without additional extraction steps.
The swabbing technique for a hard surface (metal, glass, painted wall) under ASTM E2998 is: (1) apply the pre-wetting solvent to the swab until it is damp but not dripping; (2) swab the target surface area with firm, overlapping strokes covering the entire area; (3) fold the swab head to a clean face and repeat the stroke sequence; (4) place the swab in a clean, sealed container (glass vial or low-contamination polyethylene bag) immediately; (5) label and add to the chain-of-custody log. For porous surfaces (wood, fabric, unglazed ceramic), solvent extraction of the bulk material may be more effective than surface swabbing.
Blank swabs (unused swabs from the same lot, processed identically through the extraction and analysis procedure) are the equivalent of the fire debris reagent blank: if a blank shows peaks consistent with explosive residue, the swab lot may be contaminated, or the extraction procedure may have introduced contamination. ASTM E2998 requires that blank swabs be run alongside casework samples in every analytical batch.
In India, the CFSL Hyderabad (the designated CFSL for explosives analysis) follows E2998-aligned swabbing protocols, adapted to the specific explosive types commonly encountered in Indian post-blast casework: TATP in improvised devices, RDX and PETN in military-grade explosive mixtures, ammonium nitrate-fuel oil (ANFO) in large vehicle-borne improvised explosive devices (VBIEDs), and black powder in low-order firework devices. In the UK, DSTL Fort Halstead's post-blast protocols reference both E2998 and the ENFSI EWG Post-Blast Manual for sampling and extraction. The NYPD Crime Laboratory and ATF NLC in the US use E2998 as their primary sampling reference for device and post-blast swabbing.
The GC column that works for fire debris ILR analysis is not the same as the one that works for nitroaromatic explosive residues. Knowing the difference is the difference between a valid result and a missed finding.
Gas chromatography coupled to mass spectrometry (GC-MS) is the central analytical instrument for both fire debris ILR analysis (ASTM E1618) and organic explosive residue identification. The two applications differ in target analyte class, column chemistry, and detector configuration; a laboratory offering both services typically operates separate validated methods on the same or different GC-MS platforms.
For fire debris ILR analysis by GC-MS, the standard column type is a low-polarity capillary column: a 5% phenyl polysiloxane or equivalent (HP-5MS, DB-5MS, Rtx-5MS, and equivalent commercial columns). The rationale is that ignitable liquid residues are predominantly non-polar to moderately polar hydrocarbons (alkanes, cycloalkanes, alkylbenzenes, polycyclic aromatics). A low-polarity column provides adequate resolution of the hydrocarbon classes in the ASTM E1618 target compound list while eluting them in a retention-time order that produces the characteristic chromatographic patterns used for class assignment. Typical column dimensions for fire debris: 30 m length, 0.25 mm internal diameter, 0.25 micrometre film thickness. Carrier gas: helium (historically); hydrogen (increasingly adopted for carrier gas conservation and improved linear velocity). Injector: split/splitless (splitless for low-concentration samples to maximise sensitivity); injection temperature 250-280°C.
The mass spectrometer is operated in full-scan mode (typically m/z 35-350) for initial screening and in selected ion monitoring (SIM) mode for quantitative or confirmatory analysis of specific target compounds. Total ion chromatogram (TIC) pattern matching against the ASTM E1618 reference library is the primary identification tool. The extracted ion chromatogram (EIC) for key diagnostic ions (m/z 43 for branched alkanes, m/z 55 and 57 for isoparaffinic compounds, m/z 91 for toluene and alkylbenzenes, m/z 105 for xylenes and trimethylbenzenes, m/z 128 for naphthalene) is used to confirm class assignments and to detect ILR components in complex or contaminated matrices.
For organic explosive residue analysis, LC-MS/MS (liquid chromatography coupled to tandem mass spectrometry) is now the preferred platform in most major forensic laboratories. LC-MS/MS offers superior sensitivity and selectivity for polar nitrate esters (PETN, NG), nitroaromatics (TNT, DNT), and inorganic oxidisers (ammonium nitrate, perchlorate), which either do not elute well from GC columns or thermally decompose at GC injector temperatures. The LC column is typically a C18 reversed-phase column (50 to 150 mm length, 2.1 mm internal diameter, 1.7 to 1.8 micrometre particle size) with gradient elution between a water/ammonium acetate mobile phase and a methanol or acetonitrile organic modifier. Detection is by electrospray ionisation (ESI) in negative mode (optimised for nitrate and nitro compounds) or positive mode (for cationic species such as RDX and HMX, which ionise more efficiently under some ESI conditions).
GC-MS is still used for explosive residue analysis where the target includes volatile nitroaromatics (2,4-DNT, 2,6-DNT) and TATP (triacetone triperoxide), which elutes at modest GC temperatures and produces a characteristic fragment at m/z 58. TATP analysis by GC-MS is standard at DSTL Fort Halstead, the FBI Explosives Unit, and CFSL Hyderabad because TATP's volatility makes LC-MS/MS analysis challenging (the compound partially evaporates during the LC injection process at room temperature without specialised cold-inlet precautions).
An IMS instrument at an airport departure gate detects trace explosive residue in milliseconds. A GC-MS in the laboratory confirms what it found in 20 minutes. The two instruments work together, not instead of each other.
Ion mobility spectrometry (IMS) is the dominant technology for field-level explosive residue detection at airports, border crossings, event venues, and post-blast scenes. The technology is deployed at scale: the US Transportation Security Administration fields more than 10,000 IMS units at airports; the Central Industrial Security Force (CISF) in India operates IMS equipment at major airports and critical infrastructure sites; all major European airports comply with EU Regulation 2015/1998 on aviation security, which mandates explosive trace detection (ETD) equipment at passenger and hold-baggage screening points.
The operating principle of IMS is ionisation of sample vapour followed by separation of the resulting ions by their drift time through a carrier gas in a uniform electric field at atmospheric pressure. Ions of different mass and shape have different collision cross-sections with the carrier gas and arrive at the detector at different times (the drift time, analogous to retention time in chromatography). The resulting drift time spectrum is the IMS signature. Known explosive compounds produce characteristic drift time peaks that are stored in the instrument's spectral library; a match generates an alarm.
IMS has very high sensitivity for explosives: picogram to nanogram detection limits for PETN, RDX, TNT, TATP, and HMTD under optimised conditions. This sensitivity is also its principal limitation in a forensic evidentiary context: IMS is susceptible to false positives from non-explosive compounds that have similar drift times (certain pharmaceuticals, industrial chemicals, some food seasonings that contain nitrate compounds). For this reason, IMS results are used operationally as screening (triggering further investigation) but are not reported as confirmatory identifications for court proceedings without LC-MS/MS or GC-MS confirmation. The ENFSI EWG best-practice manuals, the FBI explosive analysis guidelines, and the CFSL guidelines all specify that IMS is a screening tool and that positive IMS results in casework require confirmatory analysis.
In court, a positive IMS result without GC-MS or LC-MS/MS confirmation has been excluded as insufficient in UK Crown Court proceedings (R v. Edwards, Central Criminal Court, 2018, where the prosecution's reliance on IMS without instrumental confirmation was successfully challenged) and has been subject to Daubert scrutiny in US federal proceedings (where the lack of a specified error rate for the specific instrument model and explosive type has been a vulnerability). In India, IMS results submitted as forensic evidence by CISF or NSG operational units are typically treated as preliminary intelligence rather than court-quality evidence unless confirmed by CFSL instrumental analysis.
| Instrument | Primary use | Analyte classes | Sensitivity | Forensic status |
|---|---|---|---|---|
| IMS (field) | Screening at scene, airport, border | PETN, RDX, TNT, TATP, HMTD, NG | pg-ng range; very high | Screening only; requires confirmatory analysis for court |
| GC-MS | Fire debris ILR analysis; TATP; volatile nitroaromatics | Hydrocarbons (ASTM E1618); TATP; DNT, TNT vapour | ng-µg range | Confirmatory; primary method for fire debris |
| LC-MS/MS | Organic explosive residue confirmation | PETN, RDX, HMX, NG, TNT, ammonium nitrate, perchlorates | pg-ng range in solution |
A chain-of-custody log is not bureaucracy. It is the only proof that the exhibit in the courtroom is the same material collected at the scene.
Chain-of-custody documentation in fire and explosives investigation serves a single legal function: to establish that the exhibit presented in court is the same material collected at the scene, in the same condition, without opportunity for substitution, contamination, or tampering. Courts in every jurisdiction require this foundation before forensic analytical results can be connected to the scene from which the exhibit came. A gap in the chain of custody does not automatically result in exclusion, but it provides a basis for challenging the exhibit's integrity that the prosecution or claiming party must rebut.
The chain-of-custody log records, at minimum: the exhibit number (unique identifier assigned at collection); the description of the exhibit (container type, contents, scene location, dimensions or weight); the name and designation of the person who collected the exhibit; the date, time, and location of collection; a record of every subsequent transfer (from scene to police station, police station to laboratory, within the laboratory between analysts, to and from refrigerated storage, to court, and return). Each transfer is documented with the names and signatures of both the person surrendering the exhibit and the person receiving it, the date and time, and the condition of the tamper-evident seal at the time of transfer.
In India, the chain-of-custody requirements for forensic fire and explosives evidence are governed by the BNSS 2023 provisions on seizure of property (Sections 103-106), supplemented by CFSL and state FSL internal SOPs. The police officer who seizes fire debris at a scene prepares a mahazar (a formal seizure list with witness signatures) that serves as the foundational chain-of-custody document. The exhibit is then transferred to the FSL under a forwarding letter that is signed by both the investigating officer and the receiving FSL officer; this transfer document becomes part of the chain. The Supreme Court has emphasised in a series of cases (State of U.P. v. Deoman Upadhyaya, 1960; Mohd. Aman v. State of Rajasthan, 1997) that the chain of custody need not be perfect but must be continuous and free of unexplained gaps that raise doubt about identity or integrity.
In the United States, FBI Evidence Management Policy and ATF Evidence Management guidelines require electronic evidence tracking systems (the FBI's EVIDENCE.COM platform, the ATF's own ETMS) that generate audit-trail records for every custody transfer. The documentation is paperless in most federal contexts but the legal requirements are identical: continuity from scene to court, with every transfer documented and every break in custody explained. For state-level fire investigation, requirements vary: most states follow the NFPA 1033 evidence management guidance and the model chain-of-custody procedures published by the International Association of Arson Investigators.
In England and Wales, the Home Office Forensic Science Regulator Codes of Practice require accredited forensic providers to maintain documented audit trails for all exhibits. The Criminal Procedure and Investigations Act 1996 (CPIA) imposes a disclosure regime that requires the prosecution to disclose all material relevant to the case, including chain-of-custody records; failure to maintain or disclose these records is a disclosure failure that can result in case collapse or adverse judicial comment.
A fire debris examiner receives an evidence can from a police officer. On inspection, the tamper-evident sticker across the lid-rim interface is partially lifted at one edge. The correct action is:
Test yourself on Forensic Fire, Arson and Explosives with free, timed mocks.
Practice Forensic Fire, Arson and Explosives questions| Confirmatory; primary method for non-volatile explosives |
| Ion chromatography (IC) | Inorganic ion residue | Nitrate, perchlorate, chlorate, thiocyanate, azide | µg/L range | Confirmatory for inorganic oxidisers |