Laboratory Explosives Analysis: LC-MS, GC-MS, IC, XRF and SEM-EDX

Liquid chromatography-mass spectrometry separates analytes by their chromatographic interaction with a stationary phase before ionising and detecting them in a mass spectrometer. In reversed-phase LC-MS (the dominant mode in explosive residue analysis), analytes are separated on a C18 or C8 column using an aqueous-organic gradient mobile phase, typically water/acetonitrile or water/methanol with ammonium acetate or formate buffer. The gradient progressively elutes compounds in order of increasing hydrophobicity. TNT elutes before RDX; PETN and HMX elute later; TATP, being highly non-polar, elutes late.

The mass spectrometric interface most commonly used for explosive residues is electrospray ionisation (ESI) in negative mode. ESI is a soft ionisation technique that produces intact molecular ions with minimal fragmentation, which is critical for thermally labile compounds such as TATP (which decomposes above 160 degrees Celsius in a hot GC inlet) and HMTD. Atmospheric pressure chemical ionisation (APCI) is an alternative for less polar compounds. Both TNT and RDX ionise well in negative ESI mode: TNT gives [M - H]- at m/z 226 and an NO2 loss fragment at m/z 197; RDX forms nitrate adducts [M + NO3]- at m/z 284 and acetate adducts if ammonium acetate is used as a mobile phase modifier. PETN gives [M + NO3]- at m/z 378. Urea nitrate, the low-cost homemade explosive used in the 1993 World Trade Center bombing, gives a characteristic signal at m/z 121 for the urea nitrate anion and m/z 60 for the nitrate anion.

Triple quadrupole LC-MS/MS instruments (selected reaction monitoring, SRM) are now the standard for quantitative trace analysis in accredited forensic explosives laboratories. By selecting a precursor ion in the first quadrupole (Q1), fragmenting it in the collision cell (Q2), and detecting a characteristic product ion in Q3, SRM achieves selectivity at the low picogram-per-millilitre level in complex matrices. DSTL Porton Down (UK), the Netherlands Forensic Institute (NFI), and the FBI Laboratory's Explosives Unit (Quantico, Virginia) all use SRM-mode LC-MS/MS for primary explosive residue identification.

Degradation and transformation products matter as much as the parent compound in many investigations. TNT degrades in soil and water to 2-amino-4,6-dinitrotoluene (2-ADNT) and 4-amino-2,6-dinitrotoluene (4-ADNT) via microbial reduction. Detecting degradation products in the absence of parent compound indicates that contamination occurred before the current incident (legacy contamination from previous explosive storage or demolition) and may be exculpatory. RDX in alkaline soil degrades to hexahydro-1-nitroso-3,5-dinitro-1,3,5-triazine (MNX) and further nitrosamine products detectable by LC-MS/MS.

Gas chromatography-mass spectrometry separates analytes by their vapour pressure and stationary phase interaction at elevated temperatures, then ionises the separated vapour-phase molecules by electron ionisation (EI, typically 70 eV) in high vacuum. The EI source produces reproducible fragmentation patterns that are library-searchable against the NIST Mass Spectral Library (430,000+ EI spectra of 380,000+ compounds in the current release) and against the more targeted Southwest Explosives Research Facility (SWEREF) mass spectral database maintained by NIST and the US Army.

The primary strength of GC-MS in explosive residue analysis is its performance with volatile and semi-volatile organic compounds. The nitrate esters nitroglycerin (NG, glyceryl trinitrate) and ethylene glycol dinitrate (EGDN) are the volatile components of dynamite-type commercial blasting gelatine, and their characteristic EI fragment ions at m/z 46 (NO2+), m/z 76 (CH2-ONO2+), and m/z 152 (loss of 2 x NO2 from NG molecular weight of 227) are diagnostic in the NIST library. EGDN, molecular weight 152, loses NO2 (46) to give a base peak at m/z 106. Detection of EGDN in post-blast soil is a reliable indicator of commercial dynamite use because EGDN is the most volatile component and migrates furthest from the blast seat.

The sample inlet temperature must be carefully managed for nitroaromatic explosives. TNT (molecular weight 227, melting point 81 degrees Celsius) is amenable to GC if the inlet temperature does not exceed 250 degrees Celsius; above this, thermal degradation in the inlet becomes a significant problem. A cool on-column injection (starting at 50 degrees Celsius, ramping to 200 degrees Celsius) or a programmed temperature vaporisation (PTV) inlet set below 220 degrees Celsius is preferred for TNT in complex matrices.

Headspace GC-MS, where the vapour phase above a sealed sample vial is sampled directly by a syringe or by solid-phase microextraction (SPME), is used for bulk explosive vapour characterisation and for samples where the evidence item cannot be extracted by solvent (for example, a thermally intact explosive device recovered before detonation). SPME fibres coated with polydimethylsiloxane/divinylbenzene (PDMS/DVB) or carboxen/PDMS preferentially concentrate NG and EGDN vapours.

Laboratories in the US ATF Forensic Science Laboratories (seven regional labs including Walnut Creek, California and Ammendale, Maryland) routinely run GC-MS as a confirmatory complement to LC-MS for organic nitrate esters. The CFSL Mumbai and CFSL Hyderabad in India use GC-MS for commercial explosive residue identification in blast scene examinations, following NIST SWGMAT protocols adapted for the Indian sub-continent's commercially available explosive products, which include gel explosive (NG/EGDN-based) and ANFO.

Ion chromatography (IC) separates dissolved ions by their interaction with an ion-exchange resin, using a suppressed conductivity detector to quantify each ion. Modern IC systems with suppressed conductivity (the original Dionex design, now Thermo Fisher Scientific) can simultaneously separate and quantify a full panel of inorganic anions (fluoride, chloride, nitrite, nitrate, bromide, sulfate, phosphate, chlorate, perchlorate) and cations (ammonium, potassium, sodium, calcium, magnesium) in a single injection from a water extract of blast debris.

The forensic value of IC for post-blast anion profiling is substantial. Ammonium nitrate (ANFO's oxidiser) releases ammonium and nitrate ions on detonation; these disperse in the surrounding soil and water and can be detected at concentrations 10-100 times background soil levels at distances of 20-50 metres from the blast seat. Potassium chlorate, the oxidiser in match heads and some improvised incendiary mixtures, releases chlorate ions. Perchlorate (from potassium or ammonium perchlorate, used in pyrotechnic compositions and some commercial detonators) is a trace residue with very low environmental background, making it a high-selectivity indicator of pyrotechnic device involvement even at trace levels.

The nitrogen-ion background problem is the primary interference in post-blast IC. Agricultural soils contain nitrate at concentrations of 20-200 mg/kg from fertiliser application, and post-blast soil near a blast seat in an agricultural area may have artificially elevated nitrate from fertiliser rather than from ANFO. The analytical interpretation requires background sampling from control locations at 100-200 metres from the blast seat to establish baseline nitrate levels, and the examiner must compare the blast-site nitrate concentration against background before concluding that ANFO was involved. The site methodology for establishing those control locations is covered in the topic on post-blast scene methodology: search grid, fragment collection and seat of blast.

In the US, the FBI Laboratory's Explosives Unit maintains validated IC methods for post-blast inorganic residue following SWGMAT guidelines. The ENFSI Forensic International Network for Explosives Investigation (FINEX), which links national forensic science institutes across more than 40 countries in Europe and beyond (ENFSI membership spans 41 countries, and FINEX is open to non-EU institutes as well), has a harmonised IC protocol document updated in 2021. In the Netherlands, the NFI's explosives group has published peer-reviewed inter-laboratory comparison data for post-blast IC analysis (Journal of Forensic Sciences, 2019), establishing reference ranges for ammonium, nitrate, and potassium in ANFO post-blast soil at different distances from the seat.

X-ray fluorescence spectroscopy works by directing primary X-rays from a tube or a radioactive source at a sample. The primary photons eject core electrons from atoms in the sample, creating vacancies. Electrons from outer shells drop into these vacancies, emitting characteristic X-rays whose energies are unique to each element. Energy-dispersive XRF (EDXRF) detects these characteristic X-rays with a silicon drift detector, and the spectrum of detected energies identifies which elements are present and at what concentrations.

The principal forensic application of XRF in explosives examination is the elemental characterisation of inorganic components from pyrotechnic devices, incendiary compositions, and initiating mixtures. A typical commercial pyrotechnic shell contains potassium (from potassium nitrate oxidiser), aluminium or magnesium (metal fuels), antimony (from antimony sulfide in the priming composition), and sometimes barium (from barium nitrate as a green-colour agent). XRF of residue from a pipe bomb burst with pyrotechnic filler will detect this element signature even when the organic binder, dye, and fuel have combusted.

Handheld EDXRF instruments including the Olympus Vanta, the Bruker S1 Titan, and the Thermo Fisher Scientific Niton series are used in field contexts for preliminary elemental screening of unexploded device components and blast debris. They require no sample preparation and return results in 30-60 seconds. The limitation is that XRF is strictly elemental: it tells you potassium is present, not whether it is potassium nitrate, potassium chlorate, potassium perchlorate, or potassium sulfide. A positive potassium result requires IC or LC-MS to determine the anion pairing and hence the specific compound.

In contested examinations, benchtop wavelength-dispersive XRF (WDXRF) instruments such as the Bruker S8 TIGER or the Rigaku ZSX Primus offer superior sensitivity and spectral resolution compared to handheld EDXRF, particularly for trace elements such as lead (from lead styphnate, a primary explosive) and barium (from barium styphnate) in detonator residues. The BKA Technical Investigation Bureau, the Swedish NFC, and UK successor laboratories to the FSS (including LGC Forensics) all maintain benchtop WDXRF capability for detonator residue examination.

Scanning electron microscopy with energy-dispersive X-ray spectroscopy combines the imaging power of an SEM with elemental analysis at submicron spatial resolution. The electron beam of the SEM excites characteristic X-rays from the elements in the electron interaction volume (typically a pear-shaped region 1-2 micrometres deep in solid samples), and the EDX detector records the X-ray spectrum at each raster point, producing elemental maps as well as point spectra. In forensic explosive residue work, SEM-EDX is used primarily for two purposes: the identification of spheroidal unburned or partially burned propellant particles, and the elemental characterisation of fused or sintered inorganic residue particles. The instrumentation principles underlying SEM and EDX are covered in the forensic physics topic on electron microscopy: SEM, TEM and EDS.

Spheroidal propellant particles arise when smokeless powder or double-base propellant is partially combusted or expelled unexploded from a device or a firearm. The manufacturing process for spherical ball powder (used in many commercial rifle and pistol cartridges) produces smooth, perfectly spherical particles of nitrocellulose-based composition 50-300 micrometres in diameter. These particles are diagnostically spheroidal under SEM. Flake powders (extruded disc or flake geometry) and tubular powders (cylindrical geometry) are also identifiable by particle shape under SEM. EDX of the particle surface detects nitrogen (from nitrocellulose), and depending on the formulation, elements from the stabiliser (such as diphenylamine, invisible to EDX itself, but its presence inferred from the N signal in the absence of inorganic elements), as well as potassium, sulfur, and lead from the primer compound carried onto the propellant surface.

Post-blast residue from a device containing pyrotechnic composition typically contains spheroidal condensate particles (not propellant spheres, but droplets of fused oxidiser salt that solidified as the explosion expanded). EDX of these particles detects the inorganic element complement: potassium + chlorine for potassium chlorate, potassium + nitrogen + oxygen for potassium nitrate, aluminium + oxygen for aluminium oxide slag. The morphology (irregular agglomerated vs smooth spherical) and the EDX spectrum together allow the examiner to distinguish unexploded propellant spheres from condensate residue.

The matched elemental mapping capability of modern SEM-EDX systems is used for multi-component particle analysis. Backscattered electron imaging shows atomic-number contrast (high-Z elements appear bright, low-Z elements dark), allowing rapid identification of high-Z residue particles (lead, barium, antimony from detonator primers) on tape lift samples from blast surfaces. The CFSL Chandigarh operates a JEOL JSM-6510 SEM-EDX for post-blast residue examination. The Netherlands NFI and the Swedish NFC use automated SEM-EDX (ASPEX or ZEISS Sigma systems with automated particle search algorithms) that scan 20 mm2 of a carbon tape stub in four hours and catalogue every particle by shape and EDX spectrum.

Non-destructive analysis must precede destructive analysis whenever the sample quantity is limited. In practice, this means XRF (completely non-destructive for a solid or powder sample) and visual examination under a stereo microscope come first. SEM-EDX preparation (mounting on a carbon tape stub, coating with carbon or gold in high-vacuum) is minimally destructive for solid particles but commits a portion of the sample irreversibly. Solvent extraction for LC-MS or GC-MS is fully destructive: once the extract is made, the sample cannot be returned.

The SWGMAT Forensic Examination of Explosives standard (published by SWGMAT through NIST, now maintained as an OSAC standard through the Organization of Scientific Area Committees for Forensic Science) specifies a priority order for post-blast residue analysis: (1) physical examination and photography, (2) non-destructive elemental analysis (XRF, SEM-EDX), (3) water extraction for IC, (4) solvent extraction for LC-MS and GC-MS, (5) confirmatory identification by a method of different physical principle. The ENFSI FEL guidelines follow a near-identical priority order, with the addition that water extract and solvent extract should each be split into two portions before analysis, with one portion archived.

The defence re-test right is the reason for archiving. In England and Wales, the Criminal Procedure and Investigations Act 1996 (CPIA) imposes a disclosure duty on the prosecution; retained material suitable for defence re-testing must be identified in the Schedule 2 (retained material) disclosure. In the US, Brady v. Maryland (1963) and its progeny oblige the government to disclose material exculpatory evidence, which courts have interpreted to include physical evidence suitable for independent defence testing. In India, Section 94 of the Bharatiya Nagarik Suraksha Sanhita 2023 (BNSS) allows the court to direct production of documents or materials, and defence access to forensic materials in terrorism prosecutions has been litigated before the NIA Special Courts.

Split-sample protocol in practice: a single extract volume of 5 mL from a swab is split into 2.5 mL for prosecution analysis and 2.5 mL archived in a sealed, labelled vial with chain-of-custody documentation. The archived portion is stored frozen (-20 degrees Celsius) in a secured evidence freezer. If the defence engages an independent expert and requests access, the archived extract is transferred under chain-of-custody to the defence expert's laboratory. This protocol is standard at DSTL, the Netherlands NFI, the Swedish NFC, and the FBI Laboratory's Explosives Unit.

1. Receipt and condition assessment
   Record packaging, seal integrity, and any visible damage. Photograph before opening. Note temperature and humidity of the received sample and any colour, odour, or physical state of the residue.
2. Visual and stereo microscopic examination
   Examine under 10-40x magnification. Note particle shapes, colour gradients, unburned propellant spheres, fused agglomerates, and any primer residue. Photograph and record. Non-destructive.
3. XRF elemental scan
   Place intact sample (or section of blast debris) under portable or benchtop XRF. Acquire 30-60 second spectrum. Record all detected elements above 3 sigma background. Non-destructive. Archive XRF spectrum file.
4. SEM-EDX particle characterisation
   Lift surface particles with carbon adhesive tape. Mount stub. Carbon-coat. Scan under SEM (backscattered electron mode) at 1000x and 5000x. EDX map selected particles. Archive images and spectra. Minimally destructive.
5. Water extraction for IC
   Sonicate sample in 5 mL deionised water for 30 minutes. Filter through 0.45 micron nylon. Split: 2.5 mL to IC, 2.5 mL to archive freezer. Run IC for full anion and cation panel. Destructive of water-soluble fraction.
6. Solvent extraction for LC-MS and GC-MS
   Extract residue with 5 mL acetonitrile under sonication. Filter. Split 2:1 (prosecution:archive). Analyse prosecution portion by LC-MS/MS SRM for organic explosives; if nitrate esters are indicated, run parallel GC-MS headspace or direct injection.