For this paper, we have examined the concept of an investigation to determine what is required. The result is an event-based framework that can be used to develop hypotheses and answer questions about an incident or crime. Hypotheses are developed by collecting objects that may have played a role in an event that was related to the incident. Once the objects are collected as evidence, the investigator can develop hypotheses about previous events at the crime scene. This framework is based on the process model that is used at physical crime scenes, which has been refined from being used for dozens of years and accepted in.