Getting Into the Nuts and Bolts of Crash Investigation

I spend most of my time looking at data from black boxes, talking to mechanics, and trying to figure out what went wrong when things fall out of the sky. It is not glamorous work. The process is methodical and usually takes months, sometimes years. People outside the field think it is dramatic and fast. It is not. The actual work starts long before you touch the wreckage. You need the flight data recorder and the cockpit voice recorder first. These are typically mounted in the tail section because it has the highest survival rate in a crash. When I have recovered them, the first thing I do is connect to a reading station and pull the raw data. A modern FDR can hold up to 25 hours of parameters: altitude, airspeed, heading, pitch, roll, throttle position, control surface deflection, and dozens more. The CVR captures everything in the cockpit for the last two hours. That audio is often the most revealing part, even though it is rarely the part the public hears about. Once the recordings are readable, you cross-reference the timeline against the last known radar position and any flight following data. This is where the real work begins. You are trying to reconstruct seconds or minutes of events that occurred while the aircraft was moving very fast and possibly breaking apart. A typical analysis session runs four to six hours straight with short breaks. We look for anomalies first. An anomaly is anything that does not match the expected profile for that phase of flight.

Here is something people usually get wrong. The majority of accidents are not caused by a single catastrophic failure. They are caused by a chain of small issues compounding until something gives. I worked a case a few years back involving a regional jet that crashed during approach in marginal weather. The black box data looked clean at first glance. There was no engine failure, no structural breakup in the air, no fire warning. The NTSB team spent three days going over everything twice. The root cause turned out to be a combination of frozen pitot tubes, a misconfigured autopilot mode, and a crew that missed the transition from manual to automated flight path management because the audio on the CVR showed they were discussing something entirely unrelated at the wrong moment. Two hours of work saved us from chasing the wrong lead. Wreckage analysis comes after the recordings are processed. You map every piece to a geographic coordinate on the ground. The distribution pattern tells you whether the aircraft broke apart in flight or hit the ground mostly intact. Fuel distribution, engine separation, and control surface positioning at impact all feed into the reconstruction. Hydraulic fluid patterns on debris help determine which systems were pressurized at the time of crash. This part of the job is physical and slow. A large transport aircraft can leave debris scattered across several square kilometers. We usually bring in survey teams with total stations to map everything within a centimeter accuracy before anything gets moved. Component testing is another critical layer. When we recover an engine, a flight control computer, or a landing gear strut, it goes to a materials lab. Metallurgical analysis, fracture surface examination, and functional testing reveal whether a part failed before impact or because of impact forces. Fatigue cracks, stress corrosion, and manufacturing defects all look different under a microscope. A fatigue crack has characteristic beach marks that show progressive growth over thousands of cycles. A brittle fracture from impact looks sharp and clean with radial lines pointing back to the origin. The distinction matters because it determines whether the cause was maintenance related or a one-time overload event.

Human factors account is where most investigations stall. Crew resource management, workload distribution, communication breakdowns, and procedural deviations are harder to prove than a broken part. We use Crew Resource Management frameworks and NASA's CRM assessment tools to evaluate decision-making under stress. The problem is that this side of an investigation is subjective. Two investigators can look at the same CVR transcript and draw different conclusions about crew situational awareness. I have seen this happen more than once. The workaround is to bring in multiple reviewers from different agencies and require a consensus before any human factors conclusion is included in the final report. Weather data is another area that gets mishandled. Meteorological information from the time of the accident is pulled from multiple sources: NWS raw observations, pilot reports, satellite imagery, radar returns, and wind profile data. Sometimes these sources contradict each other. A pilot might report clear skies while radar shows a developing cell three miles away. The discrepancy usually comes down to scale and visibility. I learned this the hard way on a mountainous terrain accident where the weather briefing said VFR but actual conditions near the terrain were IFR due to orographic lift. We spent two weeks reconciling the data before the NTSB accepted our weather reconstruction. Maintenance records are where a lot of organizations get tripped up. Airlines and repair stations maintain thousands of log entries per day. Finding the one relevant entry about a replaced seal or a recurring fault code can take a technician anywhere from forty minutes to several hours depending on how organized the paperwork is. Digital logging has improved this but introduced new problems. Data is fragmented across multiple systems that do not always sync properly. On one investigation, we found that the electronic maintenance tracking system and the paper sign-off sheets had different timestamps for the same inspection because one system used UTC and the other used local time without conversion. A simple oversight that almost cost us a critical finding.

Get the Full Details

Aqaba's Underwater Treasures: Wrecks and Wonders | Deep Blue Dive Center
Aqaba's Underwater Treasures: Wrecks and Wonders | Deep Blue Dive Center

The final report writing process alone takes another two to four months after all the technical work is done. The report has to be defensible in court, understandable to the public, and precise enough that other airlines can implement the safety recommendations. Every statement needs a source. Every conclusion needs supporting evidence. This is why final reports come out so late. People expect answers within weeks. The reality is that rushing a report leads to errors, and errors get exploited in litigation or public debate. One thing I want to mention that most people do not realize: not every crash gets solved. Some investigations remain open indefinitely because the evidence is too fragmented or the data is lost. About twelve percent of NTSB investigations I have been involved with or reviewed ended with a probable cause that included the phrase "elements of which cannot be determined." That is not a failure of the process. That is an acknowledgment of physical reality. Sometimes the plane just disappears and there is not enough left to say definitively what happened. If you are interested in following real investigations, the NTSB publishes preliminary and final reports on their website. The format is dry and technical. Reading a few will give you a much clearer picture than any documentary. The FAA also maintains an aviation safety reporting system where professionals can submit anonymous incident reports. It is not a crash investigation tool, but it shows the kind of small problems that get caught before they become crashes. Most of the entries are mundane. A few are surprisingly close calls.

The job requires patience and a tolerance for ambiguity. It also requires the ability to separate what you want the answer to be from what the evidence actually says. The evidence does not care about your theory. It will tell you the truth whether it is convenient or not. That is the whole point of doing this work thoroughly and honestly.