Lockpicking Forensics datagram datagram.layerone@gmail.com Black - - PowerPoint PPT Presentation

▶
lockpicking forensics
SMART_READER_LITE
LIVE PREVIEW

Lockpicking Forensics datagram datagram.layerone@gmail.com Black - - PowerPoint PPT Presentation

Sep 25, 2023 212 likes •1.39k views

Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009 Agenda How locks/picks work Normal wear Lock Analysis Key Analysis Investigative process Destructive entry still #1! How Locks Work

slide-1
SLIDE 1

Lockpicking Forensics

datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009

slide-2
SLIDE 2

Agenda

 How locks/picks work  Normal wear  Lock Analysis  Key Analysis  Investigative process

slide-3
SLIDE 3

Destructive entry still #1!

slide-4
SLIDE 4

How Locks Work

slide-5
SLIDE 5

How Locks Work

slide-6
SLIDE 6

How Locks Work

slide-7
SLIDE 7

How Locks Work

slide-8
SLIDE 8

Pin Binding

slide-9
SLIDE 9

Pin Binding

slide-10
SLIDE 10

Picking a Lock

Apply tension Find binding pin Raise to shear line Repeat

slide-11
SLIDE 11

Picking a Lock

slide-12
SLIDE 12

Forensic Locksmithing

 1976 - Art Paholke, Chicago PD  Locks, Safes, Security (Tobias)  Werkzeugspur (Goth)  Impressioning (Diederichsen)  Determine method of entry  Identify evidence, tool marks, techniques  Provide expert testimony

slide-13
SLIDE 13

Pins – New

slide-14
SLIDE 14

Pins – New

slide-15
SLIDE 15

Key - New

slide-16
SLIDE 16

Plug - New

slide-17
SLIDE 17

Pins – 100 uses

slide-18
SLIDE 18

Pins – 100 uses

slide-19
SLIDE 19

Plug – 100 uses

slide-20
SLIDE 20

Key – 100 Uses

slide-21
SLIDE 21

Pins – 1,500 uses (pin 1)

slide-22
SLIDE 22

Pins – 1,500 uses (pin 5)

slide-23
SLIDE 23

Key – 1,500 uses

slide-24
SLIDE 24

Plug – 1,500 uses

slide-25
SLIDE 25

Pins - 5,000 uses (pin 1)

slide-26
SLIDE 26

Pins - 5,000 uses (pin 5)

slide-27
SLIDE 27

Plug – 5,000 uses

slide-28
SLIDE 28

Plug – 5,000 uses

slide-29
SLIDE 29

Plug – 5,000 uses

slide-30
SLIDE 30

Key - 5,000 uses

slide-31
SLIDE 31

Forensic Analysis

Components (pins, springs, etc) Plug Cylinder Cam/Actuator Keys Bolt Door, window, wall, etc

slide-32
SLIDE 32

Lockpicking

slide-33
SLIDE 33

Lockpicking - Pins

slide-34
SLIDE 34

Lockpicking - Pins

slide-35
SLIDE 35

Lockpicking - Pins

slide-36
SLIDE 36

Lockpicking - Pins

slide-37
SLIDE 37

Lockpicking - Pins

slide-38
SLIDE 38

Lockpicking - Pins

slide-39
SLIDE 39

Lockpicking - Pins

slide-40
SLIDE 40

Lockpicking - Pins

slide-41
SLIDE 41

Lockpicking - Pins

slide-42
SLIDE 42

Lockpicking - Pins

slide-43
SLIDE 43

Lockpicking - Pins

slide-44
SLIDE 44

Lockpicking - Plug

slide-45
SLIDE 45

Lockpicking - Plug

slide-46
SLIDE 46

Lockpicking - Plug

slide-47
SLIDE 47

Lockpicking - Plug

slide-48
SLIDE 48

Lockpicking - Plug

slide-49
SLIDE 49

Lockpicking - Plug

slide-50
SLIDE 50

Lockpicking - Tension

slide-51
SLIDE 51

Lockpicking - Tension

slide-52
SLIDE 52

Lockpicking - Tension

slide-53
SLIDE 53

Lockpicking - Cam

slide-54
SLIDE 54

Lockpicking - Cam

slide-55
SLIDE 55

Lockpicking - Medecoder

slide-56
SLIDE 56

Pick Guns

slide-57
SLIDE 57

Pick Guns - Pins

slide-58
SLIDE 58

Pick Guns - Pins

slide-59
SLIDE 59

Pick Guns - Cam

slide-60
SLIDE 60

Pick Guns - Cam

slide-61
SLIDE 61

Key Bumping

slide-62
SLIDE 62

Key Bumping

slide-63
SLIDE 63

Key Bumping - Pins

slide-64
SLIDE 64

Key Bumping - Pins

slide-65
SLIDE 65

Key Bumping - Pins

slide-66
SLIDE 66

Key Bumping - Pins

slide-67
SLIDE 67

Key Bumping - Pins

slide-68
SLIDE 68

Key Bumping - Pins

slide-69
SLIDE 69

Key Bumping - Plug

slide-70
SLIDE 70

Key Bumping - Face

slide-71
SLIDE 71

Key Bumping - Face

slide-72
SLIDE 72

Key Bumping - Plug

slide-73
SLIDE 73

Impressioning

slide-74
SLIDE 74

Impressioning - Manipulation

slide-75
SLIDE 75

Impressioning - Manipulation

slide-76
SLIDE 76

Impressioning - Plug

slide-77
SLIDE 77

Impressioning – UV residue

slide-78
SLIDE 78

Impressioning – UV Residue

slide-79
SLIDE 79

Decoding

 Depends on technique  Covert vs. surreptitious  Decoder “pick”  Manipulation  Visual/Optical  Thermal  Radiological  Disassembly

slide-80
SLIDE 80

Decoding - Visual

slide-81
SLIDE 81

Decoding - Visual

slide-82
SLIDE 82

Bypass

slide-83
SLIDE 83

Bypass

slide-84
SLIDE 84

Bypass

slide-85
SLIDE 85

Key Analysis

 Material, keyway, cuts, codes  Original or duplicate  Hand cut or machined  Recent cutting, copying  Material transfer

slide-86
SLIDE 86

Keys - Plating

slide-87
SLIDE 87

Keys – Original vs Copied

slide-88
SLIDE 88

Keys – Original vs Copied

slide-89
SLIDE 89

Keys – Stylus striae

slide-90
SLIDE 90

Keys – Hand made

slide-91
SLIDE 91

Keys – Filed

slide-92
SLIDE 92

Keys – Filed

slide-93
SLIDE 93

Keys - Dremel

slide-94
SLIDE 94

Keys – Cutting Wheels

slide-95
SLIDE 95

Keys - Comparison

slide-96
SLIDE 96

Key - Bumping

slide-97
SLIDE 97

Keys – Bumping

slide-98
SLIDE 98

Keys – Tool Marks

slide-99
SLIDE 99

Keys – Tool Marks

slide-100
SLIDE 100

Keys – Tool Marks

slide-101
SLIDE 101

Keys – Clay residue

slide-102
SLIDE 102

Keys – Wax residue

slide-103
SLIDE 103

Keys – UV Residue

slide-104
SLIDE 104

Anti-forensics Tools?

 Possible!  Difficult to use  Limited durability  Expensive*

slide-105
SLIDE 105

Safe/Vault Forensics

 Drill points  Writing/marking  Magnetic/adhesive  Tool marks

slide-106
SLIDE 106

Investigative Process

 Crime scene investigation  Laboratory examination  Investigative report  Testimony

slide-107
SLIDE 107

Crime Scene Investigation

 Photographs  Sketches  Permission issues  Evidence preservation  Chain of custody  Police vs. Insurance

slide-108
SLIDE 108

Initial Questions

 Purchase/Installation  Per day usage  Security rating(s)  Key/combo distribution  Lock condition

− Working? − Repaired? − Replaced?

slide-109
SLIDE 109

Forensic Examination

 Lock specs & data  Lock operation  Lock security rating  Tool marks  Material transfer  Keys  Do your homework!

slide-110
SLIDE 110

Disassembly

 Chamber casings  Use of key(s)  Shimming  Destructive

slide-111
SLIDE 111

Shimming

slide-112
SLIDE 112

Forensic Workspaces

 Separate!  Clean area  Clean/new tools

− Tweezers, followers, shims − Saws − Clay − Hands/etc

slide-113
SLIDE 113

Cleaning of Components

 To clean or not?  Always look first!  Evidence destruction  False evidence creation

slide-114
SLIDE 114

Cleaning of Components

slide-115
SLIDE 115

Investigative Report

 Findings  Supporting pictures  Mirrored locks*

− Picked − Pick gun − Bumped − Impressioned

slide-116
SLIDE 116

Licensing & Certification

 International Association of Investigative

Locksmiths (IAIL)

slide-117
SLIDE 117

Resources

http://www.LockpickingForensics.com http://www.LockpickingForensics.com/links.php http://www.LockWiki.com