network investigation process