I have never started an investigation. But I would assume the first step is to create a hypothesis that can be verified, find proof or open source documents to either prove or disprove your hypothesis and then change your hypothesis accurately.
I have never started an investigation. But I would assume the first step is to create a hypothesis that can be verified, find proof or open source documents to either prove or disprove your hypothesis and then change your hypothesis accurately.