Forensic seismology¶

Use recorded seismic signals, propagation models, provenance, and uncertainty-aware comparison to detect, locate, characterize, and evidentially attribute remote events for treaty, legal, historical, or incident investigation.

Version: v3 · 2026-09-19 · History
Domain-specific #: 1862
Domain group: Natural Sciences
Origin domain: Geology & Earth Sciences
Subdomains: Seismology, Forensic Event Attribution and Monitoring → Geology & Earth Sciences

Core Idea¶

Forensic seismology is the evidentiary application of seismological observations and models to detect, locate, characterize, and attribute remote natural or human-caused events in support of an investigation or monitoring regime.^[1] Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence.

Its autonomous residual is the accountable use of seismology for event attribution under evidentiary constraints, not ordinary earthquake research, resource exploration, structural earthquake engineering, or an unsupported inference that any impulsive trace is an explosion. The identity fails when detection is equated with source identification, a magnitude estimate is converted directly into cause, propagation and instrument effects are ignored, one discriminator is treated as universal, alternative events are not tested, provenance is missing, or classified conclusions exceed the reported uncertainty.

Recognition requires an analyst to identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity. Once established, it supports supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations without turning those uses into the definition.

How would you explain it like I'm…

Ground-Wiggle Detectives

When something big shakes the ground far away, special machines feel the wiggles. Forensic seismology is like being a detective with those wiggles: scientists carefully figure out where the shaking came from and what might have caused it. They check other clues too, and they say how sure they are.

Shaking Clues Investigation

Seismometers are instruments that record how the ground shakes. Forensic seismology uses those recordings as evidence in an investigation, to find, locate and describe faraway events, like an earthquake, an explosion or a collapse, and figure out what caused them. The shaking gets changed as it travels through the ground and by the instrument itself, so scientists must account for that. They compare different possible explanations, look for other evidence, and report how confident they are. A sudden spike on a recording does not by itself prove it was an explosion.

Seismic Evidence for Event Attribution

Forensic seismology applies seismology as evidence: it uses ground-motion recordings and models to detect, locate, describe and attribute distant natural or human-caused events for an investigation or monitoring system. A recorded trace is shaped by the source, by the path through the earth, by the local ground at the station, and by the instrument, so analysts must untangle these effects. They compare what they observe with what different hypotheses predict, keep track of where the data came from, and state how uncertain they are. Detecting a signal is not the same as identifying what caused it, and a magnitude alone doesn't reveal the cause. This differs from ordinary earthquake research because the goal is accountable attribution that can hold up as evidence.

Forensic seismology is the evidentiary use of seismological observations and models to detect, locate, characterize and attribute remote natural or anthropogenic events in support of an investigation or monitoring regime. Recorded waveforms are the convolution of source, propagation path, site response and instrument response, so attributing the source requires separating these contributions. The workflow starts by identifying the investigative question and authority, securing data provenance, and verifying timing and instrument metadata. Analysts then locate and characterize the event with validated models, test competing source hypotheses, seek independent corroboration, and report confidence and residual ambiguity. The discipline fails when detection is equated with identification, magnitude is read directly as cause, path or instrument effects are ignored, a single discriminant is treated as universal, alternatives go untested, provenance is missing, or conclusions outrun the stated uncertainty. Applications include test-ban monitoring, reconstructing remote explosions or collapses, and timing maritime or industrial incidents, but these uses are consequences, not the definition.

Structural Signature¶

Carrier: time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question
Inputs or antecedent state: waveforms and arrival information, instrument response, timing, station geometry, propagation model, background noise, source location and time, magnitude measures, waveform character, alternative natural and anthropogenic sources, corroborating modalities, custody, uncertainty, and reporting standard
Constitutive operation: Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence
Invariant: recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard
Recognition test: identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity
Output or consequence: supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations
Failure boundary: detection is equated with source identification, a magnitude estimate is converted directly into cause, propagation and instrument effects are ignored, one discriminator is treated as universal, alternative events are not tested, provenance is missing, or classified conclusions exceed the reported uncertainty

What It Is Not¶

It is not the whole field of seismology; many objects in that field do not satisfy its constitutive rule.
It is not its canonical example. Within international nuclear-test monitoring, seismic observations contribute to detecting and locating underground events and to evaluating whether their source characteristics are more consistent with an explosion or a natural earthquake. That is an instance, not a definition.
It is not Seismic analysis. Seismic analysis broadly models or interprets ground motion for many purposes. Forensic seismology adds an attribution-bearing investigative question, provenance, competing hypotheses, uncertainty, and an evidentiary reporting context.
It is not an unrestricted metaphor. Small events, complex crustal paths, overlapping sources, mining activity, collapses, and sparse observations can make multiple causes observationally similar; no single waveform feature or institutional label supplies universal attribution

Scope of Application¶

Forensic seismology applies when the analyst can specify time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question and establish that recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard. The entry is descriptive and nonprocedural. It omits monitoring thresholds, evasion analysis, station vulnerabilities, detailed discriminant settings, explosive design, and instructions for conducting or concealing hazardous acts.^[2]

Recognition. identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity
Comparison. Compare legitimate instances through investigative mandate, event type, location, origin time, scale, network coverage, frequency band, noise, instrument response, Earth model, path and site effects, discriminant family, alternative hypothesis, corroborating modality, provenance, uncertainty, and reporting threshold.
Boundary. Small events, complex crustal paths, overlapping sources, mining activity, collapses, and sparse observations can make multiple causes observationally similar; no single waveform feature or institutional label supplies universal attribution
Use. Preserve every assumption when using the identity for supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations.

Clarity¶

A clear claim names the carrier, governing rule, assumptions, and recognition test. This matters because forensic can mean legally admissible casework, treaty-verification analysis, or retrospective attribution, while a seismic event label can express detection, phenomenology, or causal conclusion at different confidence levels. The disciplined statement is that the object counts as Forensic seismology exactly when recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard

Identity and measurement remain separate. Detection probability, location error, magnitude uncertainty, classification error, calibration, and false-alarm behavior must be evaluated separately; a numerical score is meaningful only under a declared network, model, event population, and decision rule. Approximation or noisy evidence may weaken a classification without changing its definition.

Manages Complexity¶

The abstraction compresses international treaty monitoring, national and regional networks, historical event reconstruction, industrial and mining incidents, maritime losses, cryospheric sources, natural-versus-anthropogenic attribution, and multimodal investigation into a stable carrier, rule, invariant, and failure boundary. It makes comparison tractable while retaining the variables that control validity.

Compression can hide assumptions. A responsible use therefore declares investigative mandate, event type, location, origin time, scale, network coverage, frequency band, noise, instrument response, Earth model, path and site effects, discriminant family, alternative hypothesis, corroborating modality, provenance, uncertainty, and reporting threshold and returns to the full diagnostic whenever a convention or boundary case changes.

Abstract Reasoning¶

Type the carrier. Establish time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question and reject examples from a different problem.
Lock the rule. Express that recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard independently of one notation or implementation.
Derive carefully. Infer supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations only under the stated assumptions.
Stress-test. Contrast the legitimate boundary case—Small events, complex crustal paths, overlapping sources, mining activity, collapses, and sparse observations can make multiple causes observationally similar; no single waveform feature or institutional label supplies universal attribution—with this counterexample: using earthquake recordings solely to estimate a building's expected structural demand is seismic engineering analysis, not forensic seismology, because no remote-event attribution question is being answered.

Knowledge Transfer¶

Transfer within seismology is strong when new cases preserve the same carrier, mechanism, and diagnostic. The move from Within international nuclear-test monitoring, seismic observations contribute to detecting and locating underground events and to evaluating whether their source characteristics are more consistent with an explosion or a natural earthquake. to Archived regional seismograms can help reconstruct the time and location of an otherwise poorly observed industrial, maritime, mining, or cryospheric event. demonstrates that continuity.^[3]

Outside the domain, only the skeleton—infer a hidden source from distributed traces only after modeling how the source, carrier, noise, and recorder jointly produced the observed record—travels automatically. The terms seismogram, station, arrival, waveform, source, propagation path, instrument response, event location, magnitude, discrimination, calibration, provenance, uncertainty, corroboration, and verification regime retain domain-specific meanings, so every role and inference must be revalidated.

Examples¶

Canonical¶

Within international nuclear-test monitoring, seismic observations contribute to detecting and locating underground events and to evaluating whether their source characteristics are more consistent with an explosion or a natural earthquake. The seismic conclusion is one evidence stream within a verification regime and depends on network performance, Earth models, event size and location, alternative explanations, uncertainty, and possible corroboration by other monitoring technologies. It is canonical because the carrier, rule, invariant, and consequence are all inspectable.^[1]

Mapped back: time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question → Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence → recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard → supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations

Applied / In Practice¶

Archived regional seismograms can help reconstruct the time and location of an otherwise poorly observed industrial, maritime, mining, or cryospheric event. A defensible reconstruction preserves the archive's timing and instrument limits, models travel paths, distinguishes event class from exact cause, and separates scientific inference from legal responsibility. It qualifies only after the same diagnostic and failure boundary are checked.^[2]

Mapped back: declared instance → recognition test → boundary check → qualified use

Structural Tensions¶

T1: Exact identity vs. practical recognition. The constitutive condition may be exact while evidence is indirect. Diagnostic: Can the reviewer state both the condition and the warrant?
T2: Canonical form vs. variants. international treaty monitoring, national and regional networks, historical event reconstruction, industrial and mining incidents, maritime losses, cryospheric sources, natural-versus-anthropogenic attribution, and multimodal investigation can preserve or change the identity. Diagnostic: Which named role is invariant across the variants?
T3: Compression vs. hidden assumptions. The label is useful only while prerequisites remain visible. Diagnostic: Can each downstream inference be traced to a declared assumption?
T4: Autonomy vs. reduction. The candidate uses broader structures but claims the accountable use of seismology for event attribution under evidentiary constraints, not ordinary earthquake research, resource exploration, structural earthquake engineering, or an unsupported inference that any impulsive trace is an explosion. Diagnostic: Does that residual still support independent recognition after the parent and neighbors are subtracted?

Structural–Framed Character¶

The entry is structurally mixed but domain-framed. Its portable skeleton is infer a hidden source from distributed traces only after modeling how the source, carrier, noise, and recorder jointly produced the observed record; its identity-bearing terms are seismogram, station, arrival, waveform, source, propagation path, instrument response, event location, magnitude, discrimination, calibration, provenance, uncertainty, corroboration, and verification regime. Those terms determine admissible objects, evidence, and consequences inside seismology.

Structural Core vs. Domain Accent¶

The structural core is a carrier governed by Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence and tested by identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity. The domain accent is constitutive rather than decorative, so an analogy that preserves only the skeleton is not another instance of Forensic seismology.

This entry is a kind of Signal Extraction.

The practice literally recovers event parameters and source-relevant features from seismic observations using signal, noise, and propagation models; forensic provenance and attribution provide its autonomous specialization. What makes it its own entry is the accountable use of seismology for event attribution under evidentiary constraints, not ordinary earthquake research, resource exploration, structural earthquake engineering, or an unsupported inference that any impulsive trace is an explosion.

Relationships to Other Abstractions¶

Current abstraction Forensic seismology Domain-specific

Parents (1) — outgoing typed relations

Forensic seismology is a kind of Signal Extraction Prime

The practice literally recovers event parameters and source-relevant features from seismic observations using signal, noise, and propagation models; forensic provenance and attribution provide its autonomous specialization.

Hierarchy path (1) — routes to 1 parentless root

Forensic seismology → is a kind of Signal Extraction

Neighborhood in Abstraction Space¶

Forensic seismology sits in a crowded region of the domain-specific corpus (34^th percentile for distinctiveness): several abstractions share nearly its structure, so a description that fits it tends to fit its neighbors too.

Family — Geologic Processes & Earth Dynamics (15 abstractions)

Nearest neighbors

Computed from structural-signature embeddings · 2026-10-25

Not to Be Confused With¶

Earthquake seismology. Studies natural seismicity and Earth structure broadly without necessarily serving an investigation.
Seismic exploration. Uses controlled sources to image subsurface geology rather than attribute an unknown event.
Seismic inversion. Estimates model parameters from observations and can be one analytical component without the forensic evidentiary framework.
Infrasound monitoring. Uses atmospheric pressure waves and is a distinct but potentially corroborating monitoring technology.

References¶

[1] Alan Douglas, Forensic Seismology and Nuclear Test Bans, Cambridge University Press, 2013, DOI 10.1017/CBO9781139524001. registry ↩a ↩b Show verification details

[2] National Research Council, The Comprehensive Nuclear Test Ban Treaty: Technical Issues for the United States, National Academies Press, 2012, DOI 10.17226/12849. registry ↩a ↩b

[3] Peter Bormann, ed., New Manual of Seismological Observatory Practice 2, IASPEI and GFZ German Research Centre for Geosciences, 2012, DOI 10.2312/GFZ.NMSOP-2. doi.org registry ↩