Forensic and investigation analysis