Picture a detective's notebook: worn corners, a pencil stub, a page of cramped handwriting that will turn out to matter. Fiction loves that image. The real thing is both less romantic and more interesting, because everything in it has to survive scrutiny later by prosecutors, defense lawyers, judges and juries.
This article follows an investigation page by page, using official U.S. guidance for law enforcement and the Supreme Court's own definitions. It describes the general approach, not any one agency's rules, and practices differ from place to place.
Page one: the call
An investigation begins with a report. Even this first step is written down. The National Institute of Justice (NIJ) crime scene guide tells the first officer on the scene to note the dispatch information: the address or location, time, date, type of call and the parties involved.
The 9-1-1 call itself matters, too. NIJ's guide for eyewitness evidence says the call-taker should ask open-ended questions first, such as "What can you tell me about the car?", and follow with closed ones like "What color was the car?" It also advises avoiding leading questions such as "Was the car red?" The reason is that the way a fact is asked for can influence the answer.
Page two: the scene
The next pages are about what the scene looks like before anyone changes it. The NIJ guide asks the first responder to write down:
- where people and objects are, and how the scene looked on arrival;
- conditions such as lights on or off, doors and windows open or closed, smells, weather and temperature;
- anything said by victims, suspects or witnesses.
Later, the investigator in charge does a walk-through and keeps notes, rough sketches and an entry/exit log of everyone who comes and goes. The guide describes notes and logs as "a permanent record" of the scene. This is the main reason a real investigator's notes are not private: they are working documents that may later be reviewed. (We cover the scene in detail in what happens at a crime scene.)
Page three: the witnesses
Few things shape a case as much as what people say they saw. They are also one of the weakest kinds of evidence if handled carelessly.
NIJ's eyewitness guide begins with a warning: eyewitness evidence can be tremendously helpful in developing leads, identifying criminals and exonerating the innocent, but it "is not infallible," and even honest, well-meaning witnesses can make mistakes. The guide was written after a study of 28 cases in which DNA evidence later proved a convicted person innocent. In most of them, the most compelling evidence at trial had been eyewitness testimony.
To get the most accurate account, the guide recommends that investigators:
- Separate witnesses and ask them not to discuss the incident with one another.
- Canvass the area for other people who may have seen or heard something.
- Build rapport and choose a calm place with few distractions.
- Let the witness talk. Encourage them to volunteer information without prompting, to include even details that seem trivial, and avoid interrupting them.
- Ask open-ended questions and avoid leading ones.
- Tell the witness not to guess.
- Record the statement in writing or on audio or video, and let the witness review it and add or change anything.
- Stay in touch. The guide notes that witnesses often remember more after the interview.
The guide also tells investigators to look at a statement piece by piece. Each element is checked for internal inconsistencies and compared with other evidence, because one accurate detail does not guarantee that the next one is accurate too.
Page four: the physical evidence
Alongside the interviews, the scene yields objects: fingerprints, fibers, weapons, clothing, recordings. The notebook records where each item was found, when it was collected and who collected it. The NIJ guide describes starting a chain of custody at collection, which is a written record of everyone who handles the item afterward.
Physical evidence goes to specialists for analysis. Our articles on fingerprint evidence and Locard's exchange principle look at two of the ways it is read.
Page five: building a theory, then testing it
At some point, the pages begin to add up to a picture. The NIJ guide asks the investigator in charge, during the walk-through, to develop a "general theory of the crime." It is a working hypothesis meant to guide what to look for next, not a conclusion.
A reference entry on crime reconstruction describes how this works: theories about the circumstances are drawn from the physical evidence together with witness, victim and suspect statements, and then they are tested against the established facts. A good theory is one that can be proven wrong, and an investigator who treats a first guess as settled risks ignoring what contradicts it.
In practice, the notebook fills with questions: What is the timeline? Who was where? Which statements agree, and which do not? What evidence is still waiting for results? A detective's work is often about the list of things still unexplained.
Page six: from suspicion to probable cause
At some point, investigators may decide to arrest someone or to ask a judge for a search or arrest warrant. In the United States, the legal threshold for that step is probable cause.
The Supreme Court has described it in practical terms. In Brinegar v. United States (1949) the Court wrote that "we deal with probabilities," which are "the factual and practical considerations of everyday life on which reasonable and prudent men, not legal technicians, act." It said probable cause means less than evidence that would justify a conviction, and also more than bare suspicion: it exists where the facts and circumstances known to the officers, based on reasonably trustworthy information, would lead a person of reasonable caution to believe that an offense has been or is being committed.
In Illinois v. Gates (1983), the Court said probable cause should be judged on the "totality of the circumstances" and called it a "practical, nontechnical conception." That case was about a tip. The Court noted that a weakness in one aspect of a tip can be made up for by a strong showing in another.
The gap between this standard and the one used at trial is wide. Probable cause lets the process move forward. Proving guilt in court requires far more, and that is a different question for a different stage. (If the arrested person is questioned in custody, the rules in our article on Miranda rights apply.)
Page seven: the case file
All of the pages end up in a file. The NIJ guide lists what the investigator in charge should gather for the crime scene case file: the first responder's documentation, emergency medical records, entry/exit logs, photographs and video, sketches and diagrams, evidence records, other responders' documents, any consent form or search warrant, and laboratory reports when they become available. The guide says this allows "independent review of the work conducted."
In other words, the point of the notebook is not to impress anyone. It is to let somebody who wasn't there check how the conclusions were reached.
Common pitfalls
Real cases go wrong in predictable ways, and the official guidance is written with those in mind:
- Leading questions can shape what a witness says.
- Contamination, whether of the scene or of a witness's memory, can reduce the value of evidence. That is why witnesses are asked to avoid media coverage and not to compare stories.
- Treating one detail as proof of the rest. A witness may be right about a face and wrong about a time.
- Poor records. If the notes do not show where evidence was found and who handled it, its value can be lost.
Myths and facts
| Myth | Fact |
|---|---|
| A good witness remembers everything clearly. | Even honest, well-meaning witnesses make mistakes, and the way they are questioned affects what they say. |
| Probable cause means police have enough to convict. | It is a lower standard: more than bare suspicion, less than the evidence needed for a conviction. |
| A detective's notes are a private diary. | They are a permanent record that may be reviewed by others. |
| One brilliant detective solves a case alone. | Investigations involve many roles, from first responders to evidence collectors and laboratory examiners. |
Frequently asked questions
What is the difference between a police officer and a detective?
Titles and duties vary by agency. In general, patrol officers respond first and secure the scene, and detectives or investigators lead the follow-up work. In the NIJ guides, the roles are described as the initial responding officer and the investigator in charge.
Do detectives really use notebooks?
They keep notes and logs, though many agencies now use digital systems as well. The NIJ guide requires everyone assigned to a scene to maintain notes and logs of their activities.
How long does an investigation take?
It depends on the case. Some are resolved quickly; others stay open for years and become cold cases. (See our article on what a cold case is.)
Can the public help an investigation?
Yes. If you have information about a case, the right step is to contact the investigating agency or its tip line, and not to investigate on your own.
Where the app fits in
The Detective Investigation collection in the True Crime Coloring Book app lives in the world of this article: case boards, notebooks, maps and desk lamps, drawn as line art for you to color. The artwork is illustrative rather than graphic.
Sources
- National Forensic Science Technology Center for the National Institute of Justice, Crime Scene Investigation: A Guide for Law Enforcement, 2013: dispatch information, documentation by the first responder, scene assessment and walk-through, notes and logs, chain of custody and the case file.
- National Institute of Justice, Eyewitness Evidence: A Guide for Law Enforcement, 1999: the 9-1-1 call, interviewing witnesses, documentation, and assessing the elements of a statement.
- U.S. Supreme Court, Brinegar v. United States, 338 U.S. 160 (1949), via Cornell Legal Information Institute: the definition of probable cause.
- U.S. Supreme Court, Illinois v. Gates, 462 U.S. 213 (1983): the "totality of the circumstances" approach.
- Gale, Locard's Exchange Principle, World of Forensic Science: how theories of a crime are drawn from evidence and tested against established facts.
