Some environments have developed policies and laws that forbid certain events from occurring. An incident is an event or sequence of events that violate a policy and more specifically, a crime is an event or sequence or events that violate a law. In particular, a digital incident is one or more digital events that violate a policy. In response to an incident or crime, an investigation may begin. An investigation is a process that develops and tests hypotheses to answer questions about events that occurred. Example questions include“what caused the incident to occur”, “when did the incident occur”, and “where did the incident occur”
