steps of an investigation