A major homicide investigation surfaced a problem every digital investigator now recognizes: a category of useful Google data that legal process did not reliably reach. The investigative work that pushed past that problem produced a method — the Tombstone Report from Google — that is now used by law enforcement agencies around the world.
Every modern homicide investigation eventually arrives at the same place: a victim, a suspect pool, and a digital footprint that holds more about both than any witness ever will. Phones, accounts, location histories, and search activity are not background detail anymore — they are primary evidence. And by far the largest and most useful repository of that evidence sits inside Google.
Joseph R. Auriemma, Jr. spent 24 years with the New York State Police and retired as a Senior Investigator. During his time in the Bureau of Criminal Investigations and the Major Crimes Unit, he worked thousands of interviews and a great many serious felony cases — including homicides. In one of those investigations, the case file revealed exactly what every modern detective eventually sees: a portion of the digital record that should have been reachable through standard legal process kept slipping past it.
The data existed. The legal authority to obtain it existed. What did not exist, in any usable form, was a documented method for law enforcement to ask Google for it in a way that produced what investigators actually needed. The gap was procedural, not technical — and the gap was costing cases.
The work that closed that gap was investigative, not academic. It started inside an active homicide investigation, grew through coordination with prosecutors and provider counsel, and produced — through trial and refinement — a structured request format and supporting workflow that could be repeated by another agency on another case.
That format became known as the Tombstone Report from Google. The name reflects what the report does: it surfaces the foundational identifying record tied to a Google account or device — the kind of summary that anchors every subsequent piece of digital evidence on the case. Once the Tombstone is in hand, every later request — content, location, search history, communications — is built on a verified base rather than a series of best guesses.
The development of the report was not a single moment. It was the iterative product of a working investigator who refused to accept that the data was unreachable, who collaborated with the people on the legal-process side of Google, and who was willing to keep refining the request until it produced a usable result.
A Tombstone Report gives investigators a verified, structured baseline of identifying information tied to an account or device — the kind of record that lets a detective know they are working with the right target before they start drafting search warrants for content. It closes the question that quietly derails so many digital cases: is this account, this device, this email address actually the person we think it is?
Beyond identification, the report becomes a navigational document for the rest of the investigation. It tells the investigator what kinds of follow-on records may exist for that account and how to request them; it gives prosecutors a clean foundation for digital-evidence chain of custody; and it gives defense counsel and triers of fact a verifiable starting point if the digital trail is later challenged.
Treating the Tombstone as the starting point — not as one optional piece — is the workflow change the report actually represents.
What started inside one homicide investigation is now used by law enforcement agencies around the world. The Tombstone Report from Google is referenced in digital-investigation training, written into agency tradecraft documents, and applied across the full spectrum of cases that touch a Google account or device — homicide, child exploitation, financial crime, missing persons, internal misconduct.
That kind of adoption rarely happens because someone published a paper. It happens because the method works in the room — because investigators try it, get usable evidence, and pass the workflow to the next investigator who needs it.
The Tombstone Report is one of the clearest illustrations of a principle ASC teaches across every program: real investigative breakthroughs do not come from theory. They come from working a case and being willing to build the tool the case needs.
The Tombstone Report is not a methodology in the sense that cognitive interviewing or SUE are methodologies. It is a forensic tool. But its origin story is itself a methodology — a working demonstration of how serious case work, persistent legal coordination, and a refusal to accept "we can't get that" produce real-world investigative tradecraft.
That is the discipline ASC tries to transfer in every course. Investigations are not won by checklists; they are won by people who understand the gap between what the case file says and what the case actually needs, and who do the work to close it. The Tombstone Report exists because that gap was visible and someone decided to close it.
When ASC instructors reference the Tombstone Report in class, the point is not the report itself. The point is the mindset: see the gap, work the problem, build the tool, share it with the next investigator who needs it.
The Tombstone Report case study is woven through several ASC programs — most notably From Information to Evidence, which teaches investigators how case material moves through the interview into admissible records, and Precision Search Warrants, which builds the legal-process discipline the Tombstone workflow depends on.
Students learn the report's origin, the case-work mindset that produced it, and how to apply the same discipline to the digital evidence problems they face today. Tools change quickly. The investigative reasoning behind a tool like the Tombstone Report does not.
From Information to Evidence and Precision Search Warrants are where the Tombstone Report case study lives.