Crimes are solved through a sequence: officers secure the scene and document it, investigators collect physical and digital evidence, forensic labs analyze what was collected, national databases turn samples into candidate matches, detectives interview witnesses and question suspects, and prosecutors weigh whether the evidence meets the legal threshold to arrest and charge. Every stage runs on both technical work and constitutional rules, and a mistake at any point can lose the case. How crimes are solved, in practice, is the story of that sequence holding together from the first officer at the door to the last exhibit admitted at trial.
Securing the Scene Comes First
The first officers on scene lock it down. A perimeter goes up, access is restricted, and the goal is to keep everything exactly as it was found. One careless footstep through a blood pattern or a bystander touching a doorknob can destroy evidence that would have been decisive later.
Once the scene is stable, documentation starts. Officers take chronological notes, photograph the scene from wide overviews down to close-ups of individual items, and sketch the layout to capture spatial relationships. Photography freezes the scene before anything is moved. These records anchor everything that follows.
Every item collected enters a formal chain of custody: a documented trail that records who handled the evidence, when, and how it was stored at each stage. Each transfer must be logged. Without an intact chain, a court can exclude the evidence or give it less weight, because there is no way to verify it was not tampered with between the scene and the courtroom.1National Institute of Justice. Law 101: Legal Guide for the Forensic Expert – Chain of Custody
What Investigators Collect
Investigators look for tangible items that connect people and events to the crime. Biological materials like blood, saliva, hair, and skin cells are among the most valuable because they can yield DNA profiles. Even objects a person merely touched can carry “touch DNA” from shed skin cells, giving investigators a genetic link to whoever handled a weapon, doorknob, or window frame.2National Institute of Justice. Collecting DNA Evidence at Property Crime Scenes – Biological Evidence
Fingerprints and palm prints remain workhorses of criminal identification. Latent prints, the invisible impressions left by skin oils, are developed on surfaces using powders, chemicals, or specialized lighting. Footprints, tire tracks, and tool marks also get documented and cast. Ballistic evidence includes spent cartridge casings and recovered bullets, which carry microscopic markings unique to the firearm that fired them.
Trace evidence fills the gaps larger items miss. Fibers transferred from clothing, soil tracked in from a specific location, glass fragments, and paint chips can place a person or vehicle at the scene. Collection methods are strict and vary by evidence type, and cross-contamination between items is avoided by changing gloves, using separate packaging, and keeping evidence from different locations apart.
Digital evidence is now as important as anything physical. Data from phones, computers, vehicles, drones, and cloud storage can contain communications, location records, photos, and browsing history that reconstruct a person’s movements and intentions.3National Institute of Standards and Technology. Digital Evidence Digital evidence plays a role in prosecuting virtually all categories of crime, not just offenses committed online.4National Institute of Justice. Digital and Multimedia Evidence
How Forensic Labs Turn Evidence Into Findings
Collected evidence goes to forensic laboratories where specialists extract information field investigators cannot. This is where raw physical items become courtroom-ready findings.
DNA Analysis
DNA profiling compares genetic material from crime scene samples against known profiles. Modern techniques can amplify tiny or degraded samples into usable profiles, and the discriminating power is extraordinary: the odds of two unrelated people sharing the same full profile are often expressed in the trillions. Rapid DNA technology has accelerated the process. Fully automated instruments can generate a profile from a mouth swab in one to two hours without a traditional laboratory, letting booking stations search an arrestee’s DNA against unsolved cases within 24 hours of arrest.5FBI. Guide to All Things Rapid DNA
Fingerprint Comparison
Fingerprint examiners compare latent prints against known prints, either from a specific suspect or from an automated database. Chemical fuming with cyanoacrylate can make invisible prints visible on surfaces where powder alone would not work. The comparison relies on expert judgment rather than a fixed numerical threshold, with examiners evaluating whether the ridge detail matches to a degree that excludes coincidence.
Ballistics
Firearms examiners compare bullets and cartridge casings under high-powered microscopes. Every gun leaves distinctive tool marks on the ammunition it fires, and examiners look for matching patterns of grooves, scratches, and impressions. The analysis can establish whether a specific weapon fired the rounds found at a scene and can link shootings across different locations and dates.
Digital Forensics
Digital forensic analysts recover, preserve, and examine data from electronic devices. Their work includes deleted files, encrypted communications, GPS records, and internet activity, often producing a timeline of a suspect’s actions before, during, and after a crime. In one well-known example, a floppy disk helped investigators identify the BTK serial killer after decades of evasion.4National Institute of Justice. Digital and Multimedia Evidence
National Databases That Generate Leads
Individual pieces of evidence become far more powerful when searched against national databases aggregating millions of records from law enforcement agencies across the country. Three do most of the work.
CODIS, the FBI’s Combined DNA Index System, stores DNA profiles from convicted offenders, arrestees, and forensic casework, along with profiles from unidentified remains and missing persons. Names are not stored with the profiles. As of late 2025, the national index held over 19 million offender profiles and more than 6 million arrestee profiles, and CODIS searches had produced over 781,000 hits assisting in more than 758,000 investigations.6FBI. CODIS-NDIS Statistics
Next Generation Identification (NGI) is the FBI’s biometric repository and the largest in the world. It goes well beyond fingerprints, storing palm prints, iris scans, facial recognition photos, and images of scars, marks, and tattoos. Officers in the field can run a fingerprint captured on a mobile device against NGI and get results in minutes through the Repository for Individuals of Special Concern. The facial recognition component searches submitted probe photos against over 30 million criminal mug shots and returns a ranked list of candidates as investigative leads.7FBI. Next Generation Identification (NGI)
NIBIN, the National Integrated Ballistic Information Network operated by ATF, is the only national network for comparing ballistic evidence. Crime labs submit digital images of cartridge casings from shooting scenes and test fires from recovered guns, and the automated system flags potential matches across jurisdictions. A firearms examiner then confirms any hit by examining the physical evidence under a microscope. The process regularly reveals connections between shootings that different agencies investigated independently.8ATF. Fact Sheet – National Integrated Ballistic Information Network
Interviewing Witnesses and Questioning Suspects
Physical evidence tells part of the story. The rest comes from people. Investigators interview witnesses and victims for firsthand accounts, physical descriptions, and details about timing and sequence. Neighborhood canvasses turn up people who saw or heard something without realizing its significance. Surveillance footage from nearby cameras can corroborate or contradict witness accounts and place individuals at specific locations.
Interrogating a suspect is a different exercise. Two dominant approaches shape how agencies handle it. The Reid Technique, widely used in the United States, begins with a behavioral analysis interview designed to assess whether the person is being truthful, then moves to a structured interrogation where the investigator presents the case as though guilt is established and offers a face-saving reason to confess. Critics have argued that the confrontational approach produces false confessions, particularly among juveniles and people with intellectual disabilities. The PEACE model, developed in England and used in several other countries, takes a less confrontational path: investigators let the suspect tell their story without interruption, then walk through inconsistencies between the account and the evidence. Investigators using PEACE are prohibited from deceiving suspects during the interview.
Before any custodial interrogation begins, officers must give Miranda warnings. If you are in custody and being questioned, you have the right to remain silent, the right to know that anything you say can be used against you, the right to an attorney, and the right to a court-appointed attorney if you cannot afford one. Once you invoke either the right to silence or the right to counsel, questioning must stop. Police cannot resume interrogation after you ask for a lawyer unless you initiate further conversation yourself or at least 14 days pass with a meaningful break in custody.9Legal Information Institute. Requirements of Miranda
Constitutional Rules That Shape Every Investigation
The investigative process does not operate without limits. Constitutional protections constrain what law enforcement can do at every stage, and violations can destroy a prosecution.
Warrants and Their Exceptions
The Fourth Amendment protects against unreasonable searches and seizures. Before police can search your home, car, or personal effects, they generally need a warrant issued by a judge based on probable cause. The warrant must specifically describe the place to be searched and the items or people to be seized.10Library of Congress. U.S. Constitution – Fourth Amendment Broad, open-ended warrants are unconstitutional.
Several recognized exceptions allow warrantless searches. Under the plain view doctrine, officers can seize evidence of a crime when it is clearly visible and they have a lawful right to be where they are. Exigent circumstances permit warrantless entry when there is an immediate need to prevent harm, stop the destruction of evidence, or pursue a fleeing suspect. Consent is another exception: if you voluntarily agree to a search, no warrant is needed.
In 2018, the Supreme Court extended the warrant requirement to digital-age surveillance. In Carpenter v. United States, the Court held that police need a warrant supported by probable cause before accessing historical cell-site location records from a phone carrier. The Court recognized that those records can reconstruct a person’s movements over weeks or months, creating a level of surveillance that demands Fourth Amendment protection. The decision noted that case-specific exceptions like exigent circumstances can still justify a warrantless search of location records.11Supreme Court of the United States. Carpenter v. United States
The Exclusionary Rule
When investigators violate the Fourth Amendment, the remedy is the exclusionary rule: evidence obtained through an illegal search generally cannot be used against the defendant at trial. The rule extends further through what courts call “fruit of the poisonous tree.” If an illegal search leads police to additional evidence they would not have found otherwise, that secondary evidence is typically excluded as well. Courts have carved out exceptions, including situations where officers relied in good faith on a warrant later found invalid, where the evidence would inevitably have been discovered through lawful means, or where the connection between the illegal conduct and the evidence is too remote to justify suppression.
From Evidence to Arrest and Charges
Gathering evidence is only half the work. Turning an investigation into a criminal case requires meeting specific legal thresholds.
An arrest requires probable cause, which the Supreme Court has described as a “practical, nontechnical” standard. It exists when the facts known to the officer would lead a reasonable person to believe a crime has been committed and the suspect committed it. Probable cause demands more than a hunch or reasonable suspicion but does not require certainty.12Legal Information Institute. Probable Cause Officers can arrest with or without a warrant, but in either case probable cause must exist.
After an arrest, the case must pass through a screening process before it goes to trial. Two mechanisms serve that purpose:
- A grand jury, in the federal system, is a panel of 23 citizens that hears evidence presented by the prosecutor in a secret, one-sided proceeding. The defense is not present and cannot cross-examine witnesses. If at least 12 jurors find probable cause, they issue an indictment, and the prosecutor prepares and signs the formal written charge before the case can proceed.13U.S. District Court for the District of Columbia. Handbook for Federal Grand Jurors
- A preliminary hearing, by contrast, is an open court proceeding where a judge evaluates whether probable cause exists, the defense is present, and defense counsel can cross-examine prosecution witnesses. This gives the defense an early preview of the evidence against the accused.
Federal cases and serious felonies in many states require a grand jury indictment. Other jurisdictions rely on preliminary hearings or give prosecutors the choice. Grand juries approve indictments in the vast majority of cases presented to them, which is why some legal commentators view the process as heavily favoring the prosecution.
Whether Forensic Evidence Reaches the Jury
Collecting strong evidence is not enough if it cannot survive legal scrutiny at trial. Two gatekeeping mechanisms determine whether forensic findings reach the jury.
The chain of custody must remain unbroken from the moment evidence is collected through storage, testing, and presentation in court. Every transfer and every period of custody must be documented. If the prosecution cannot account for a gap, the defense can argue the evidence was compromised, and a judge may exclude it or instruct the jury to give it less weight.1National Institute of Justice. Law 101: Legal Guide for the Forensic Expert – Chain of Custody
Expert testimony faces its own hurdle. In all federal courts and the majority of states, judges apply the Daubert standard, which requires them to evaluate the reliability and relevance of a forensic expert’s methodology before the testimony goes to the jury. The judge considers whether the technique has been tested, whether it has been peer-reviewed, its known error rate, whether standards control its application, and whether it is accepted within the relevant scientific community. A handful of states still use the older Frye standard, which focuses primarily on whether the scientific method has gained general acceptance in its field. Either way, the trial judge acts as a gatekeeper, and forensic methods that do not meet the applicable standard get excluded regardless of the expert’s credentials.
Cold Cases and Newer Tools
Not every investigation wraps up quickly. A cold case is one where all investigative leads have been exhausted, and that can happen in months, not just years.14National Institute of Justice. Cold Cases: Resources for Agencies, Resolution for Families Advances in forensic technology, particularly in DNA analysis, have given investigators tools to reopen cases that once seemed unsolvable.
The most dramatic breakthrough has been investigative genetic genealogy. When crime scene DNA does not match anyone in CODIS, investigators can upload the profile to consumer DNA databases and search for partial matches with distant relatives. They do not need an exact match. Instead, they identify extended family members who share enough DNA to indicate a biological relationship, then use traditional genealogy research, age, location, and other details to narrow the field to specific suspects. Once a candidate is identified, investigators collect a fresh DNA sample and compare it directly to the forensic evidence.15Federal Judicial Center. Non-Law-Enforcement Database Searches: Investigative Leads and the Risk of Privacy Exposure
The technique’s most famous success came in 2018, when investigators identified Joseph James DeAngelo as the Golden State Killer after decades of failed leads. Crime scene DNA had never matched anyone in law enforcement databases, so investigators uploaded the profile to the consumer genealogy platform GEDmatch, identified relatives, and worked backward through family trees until DeAngelo emerged as the likely suspect. A fresh DNA sample confirmed the match. The Department of Justice has since issued interim policy recommending that genetic genealogy searches of consumer databases be reserved for unsolved violent crimes where CODIS searches have failed.15Federal Judicial Center. Non-Law-Enforcement Database Searches: Investigative Leads and the Risk of Privacy Exposure
Facial recognition technology has also become a tool in cold case work and active investigations, though its use remains inconsistent. A 2024 Government Accountability Office review found that only three of seven selected federal law enforcement agencies had policies governing facial recognition’s use as of late 2023, and most agencies had not required staff training before using the technology. Both the Department of Justice and the Department of Homeland Security have since developed policies addressing civil liberties protections and training requirements.16U.S. Government Accountability Office. Facial Recognition Technology: Federal Law Enforcement Agency Efforts Related to Civil Rights and Training
Whatever tools are involved, the case that ultimately holds up in court is one where the forensic results, witness accounts, digital records, surveillance footage, database hits, and financial analysis line up into a single timeline. Investigators look for where different evidence types corroborate each other and where contradictions point to gaps that still need filling. A DNA match at the scene means little if the suspect has an alibi backed by cell-site location data, and a confession is weakened if it contradicts the physical evidence. That reconciliation, done under the constitutional rules that governed each step of collection, is what turns an investigation into a conviction.