CRIMIVEX Academy
Introduction to Criminal Investigation — Student Study Guide
Foundations of Criminal Investigation for Students and Independent Learners
Criminology • Criminal Justice • Forensic Science • Cybersecurity
Version 1.0 — 2026
Created by:
Farah Abdi Hassan
Learn. Investigate. Lead.
Preview edition · Coming soonYou can save the complete Study Guide to your Android phone in a few steps.
- Tap Print / Save as PDF.
- In the Android print screen, select Save as PDF.
- Select paper size A4.
- Select Portrait.
- Select All pages.
- Tap the Save/PDF icon.
- Save the file as:
CRIMIVEX_Introduction_to_Criminal_Investigation_Study_Guide_v1.0.pdf
Important: This saved PDF is your prepared digital Study Guide. The product remains COMING SOON until real payment and secure delivery are connected.
Copyright & educational disclaimer
© 2026 Farah Abdi Hassan / CRIMIVEX Academy.
Scope
This is an introductory learning resource. It is not an official police manual, government publication, university textbook, professional investigative certification, legal advice, or a substitute for applicable training.
How to use this guide
This guide is organized from foundational concepts to applied learning exercises. Read each section, note unfamiliar terms, and test your understanding using the learning checks.
Study method
- Read the lesson once for structure.
- Return to definitions and examples.
- Write your own explanation of each key idea.
- Record uncertainty instead of guessing.
Case studies
Use the fictional cases to practice separating known information, gaps, evidence considerations, and alternative explanations. They are not operational instructions.
Revision
Answer questions before checking the answer key. Multiple defensible approaches may exist for scenario questions.
Table of contents
- 01How to use this guide
- 02Learning objectives
- 0301. Introduction to Criminal Investigation
- 0402. Principles and Stages of an Investigation
- 0503. Crime-Scene Fundamentals
- 0604. Evidence Identification and Preservation
- 0705. Witness and Victim Interviewing
- 0806. Investigation Planning and Case Management
- 0907. Investigative Ethics and Legal Safeguards
- 1008. Fictional Case-Study Exercises
- 11Revision and assessment
- 12Answer key
- 13Key terms glossary
- 14References and further reading
Learning objectives
By the end of this guide, learners should be able to:
- Explain what criminal investigation means and why it matters.
- Distinguish allegations, information, facts, and evidence.
- Describe basic investigative stages and planning concepts.
- Recognize crime-scene, preservation, and evidence principles.
- Use ethical, neutral interview concepts.
- Identify confirmation bias and alternative explanations.
- Explain why legal safeguards and current official sources matter.
Chapter 01
Introduction to Criminal Investigation
Criminal investigation is a disciplined effort to establish what happened, how it happened, and what reliable information can support a fair understanding of an event. It is not the same as accusation. An allegation begins an inquiry; careful investigation tests it.
1.1 Meaning and purpose
Investigation means a planned search for relevant information. In criminal justice, the purpose is to clarify facts, preserve relevant material, identify reasonable explanations, and support lawful decision-making. Different jurisdictions and agencies use different procedures, so this guide presents concepts rather than a universal manual.
1.2 Facts, information, allegations, and evidence
An allegation is an assertion that something occurred. Information is any received detail. A fact is a proposition supported by reliable information. Evidence is material that may help prove or disprove a proposition. These categories can overlap, but none should be treated as conclusive without assessment.
1.3 Objectivity and investigative thinking
Objectivity means testing information fairly, including information that does not support an initial theory. Investigative thinking asks: What do we know? How do we know it? What else could explain it? What information would change our assessment? Documentation makes this reasoning visible and reviewable.
1.4 Responsibility and documentation
A responsible learner records sources, dates, uncertainties, decisions, and gaps. Good notes distinguish observation from interpretation. They also make it easier to correct mistakes, protect dignity, and avoid presenting assumptions as established facts.
- Separate observation from inference.
- Record alternative explanations.
- Use respectful, precise language.
- Review conclusions against the available information.
Chapter 02
Principles and Stages of an Investigation
A useful learning model is: Information → Planning → Gathering → Assessment → Analysis → Review → Reporting. This is a conceptual sequence, not a mandatory procedure for every real investigation.
2.1 From initial information to a question
Initial information may be incomplete or inaccurate. The first learning task is to define a clear investigative question without assuming the answer. A good question identifies the issue to be clarified and the limits of the inquiry.
2.2 Planning and gathering
Planning identifies available information, information gaps, lawful sources, responsibilities, and recording needs. Gathering may involve documents, interviews, observations, or digital material, depending on the matter and applicable procedure.
2.3 Assessment, analysis, review, and reporting
Assessment considers relevance, reliability, integrity, and limitations. Analysis compares information and explanations. Review checks quality and bias. Reporting communicates supported findings, uncertainties, and unanswered questions clearly.
Chapter 03
Crime-Scene Fundamentals
A crime scene is a place or environment associated with an alleged event. Learning about scenes involves understanding preservation, observation, documentation, and role boundaries—not improvising procedures outside lawful authority or training.
3.1 Security, preservation, and contamination
Scene security protects people and relevant material from unnecessary disturbance. Preservation means maintaining the condition and context of items as far as reasonably possible. Contamination is an unwanted change caused by contact, movement, environmental exposure, or poor documentation.
3.2 Observation and records
Observation should be careful and descriptive. Records may include notes, photographs, measurements, sketches, logs, and other approved documentation. The goal is an accurate record that can be understood later, not a dramatic conclusion made at the scene.
3.3 Roles and premature conclusions
Different trained personnel may have different responsibilities. Learners should understand role separation and follow applicable institutional procedures. A scene can suggest possibilities, but it rarely answers every question by itself. Premature conclusions can cause tunnel vision and missed information.
Chapter 04
Evidence Identification and Preservation
Evidence is information or material that may help establish whether a proposition is true or false. Its usefulness depends on relevance, reliability, integrity, lawful handling, and clear documentation.
4.1 Evidence categories
Physical evidence includes tangible objects or traces. Digital evidence is information stored or transmitted by digital systems. Documentary evidence includes written or recorded material. Direct evidence addresses a proposition directly; circumstantial evidence supports an inference from surrounding facts.
4.2 Relevance, reliability, and integrity
Relevant material has a logical connection to a question. Reliability concerns whether the information can be trusted for its intended use. Integrity concerns whether material is complete and unchanged in ways that matter. These judgments require context and often qualified examination.
4.3 Preservation and chain of custody
Preservation protects material from avoidable change. Packaging, labeling, storage, transfer, and examination must follow applicable law and institutional procedure. Educational model: Collection → Documentation → Transfer → Storage → Authorized examination → Documentation. This model is not a universal legal procedure.
Chapter 05
Witness and Victim Interviewing
An interview is a structured conversation intended to obtain information. Interrogation can carry a different purpose and legal context. This guide focuses on respectful, ethical learning principles and does not replace trained practice or safeguards.
5.1 Preparation and communication
Preparation includes clarifying the purpose, reviewing known information, considering accessibility needs, and planning neutral questions. Respectful communication supports dignity and may improve clarity. Active listening means attending to the speaker, checking understanding, and avoiding unnecessary interruption.
5.2 Question design
Open questions invite a person to describe events in their own words. Clarifying questions seek detail without suggesting an answer. Leading questions embed an expected answer and can distort memory. Neutral: “Please describe what you noticed.” Leading: “You saw the blue vehicle leave, didn’t you?”
5.3 Vulnerability, trauma, and corroboration
People may have different communication needs or memory limitations. Trauma-aware communication at a general level means patience, choice where appropriate, dignity, and avoiding pressure. Information should be documented accurately and considered alongside other sources rather than treated as automatically true or false.
Chapter 06
Investigation Planning and Case Management
Case management is the organized handling of questions, information, decisions, documents, responsibilities, and review. It helps learners see the difference between a busy file and a well-reasoned inquiry.
6.1 Planning the inquiry
Begin with the case question. List known information and information gaps. Identify evidence to consider, reasonable lines of inquiry, responsibilities, and review points. A plan should remain open to revision when new information appears.
6.2 Notes, alternatives, and confirmation bias
Case notes should show what was considered and why decisions were made. Confirmation bias is the tendency to notice or favor information that supports an existing belief. Counter it by writing possible explanations, seeking disconfirming information, and asking someone else to review the reasoning.
6.3 Educational case-planning worksheet
Case question: ________________________________ Known information: _____________________________ Information gaps: ______________________________ Evidence to consider: __________________________ Possible explanations: __________________________ Questions requiring clarification: ______________ Review notes: __________________________________
Chapter 07
Investigative Ethics and Legal Safeguards
Ethics guide how information is sought, handled, interpreted, and communicated. Legal requirements differ by jurisdiction and can change. Learners should consult current Kenyan law, official sources, institutional policy, and qualified professionals for real matters.
7.1 Fairness and dignity
Objectivity, presumption of innocence, human dignity, privacy, confidentiality, and non-discrimination are important safeguards. A person should not be treated as responsible merely because they are mentioned, suspected, or associated with an event.
7.2 Accountability and lawful practice
Evidence handling, interviews, data access, disclosure, and reporting must be lawful and accountable. Conflicts of interest should be identified. Professional conduct includes honesty about uncertainty, protection of sensitive information, and willingness to correct errors.
Chapter 08
Fictional Case-Study Exercises
The following cases are entirely fictional and created for learning. They are not based on real victims, suspects, organizations, or outcomes. They are designed to practice questions, alternatives, documentation, and ethical reasoning.
Case 1 — The Riverside Apartment
Scenario: A fictional resident reports that a laptop and camera are missing after returning from a weekend away. A door appears damaged, but no one saw the event. Known information: the items were present on Friday evening and noticed missing on Monday morning. Gaps: exact timing, access history, ownership records, and whether the damage is connected. Consider: scene records, purchase documents, neutral accounts, and alternative explanations. Questions: What should be distinguished as observation? What information would test each explanation? Learning point: an apparent forced entry does not establish every detail of what occurred.
Case 2 — The Missing Researcher
Scenario: In a fictional town, a 22-year-old learner does not return to a scheduled study meeting and cannot be reached. Known information: a friend last exchanged messages the previous afternoon. Gaps: plans, route, health or safety concerns, and recent contacts. Consider privacy, urgency, respectful communication, and accurate timelines. Questions: Which facts are verified? What assumptions should be avoided? Learning point: missing-person inquiries require care, speed appropriate to the circumstances, and dignity.
Case 3 — The Community Payment Portal
Scenario: A fictional community group reports unfamiliar transfers from an online account. Known information: alerts show several disputed transactions. Gaps: who had authorized access, when credentials were used, account settings, and whether a system error is possible. Digital concepts: logs can provide time-stamped records; metadata describes information about a file or event; integrity means preserving material in a trustworthy state. Questions: What should be preserved through authorized channels? What alternative explanations exist? Learning point: digital evidence requires careful scope, lawful access, and qualified handling.
Revision and assessment
Multiple-choice questions
- To confirm the first suspicion
- To clarify facts fairly
- To punish a person
- To publish rumors
- A tested conclusion
- A type of packaging
- An assertion that something occurred
- A final judgment
- Ignoring contrary information
- Recording alternative explanations
- Using only one source
- Avoiding review
- An unwanted change to material or context
- A written conclusion
- A category of witness
- A case number
- You saw the red bag, correct?
- Was the person tall?
- Please describe what you noticed.
- It happened at 8 pm, right?
- A person’s education
- Handling and transfers of material
- A media headline
- A theory’s popularity
- Seek disconfirming information
- Favor information supporting an existing belief
- Preserve a document
- Ask open questions
- Only printed photographs
- Information stored or transmitted digitally
- Only physical objects
- Only witness opinions
- Only a final conclusion
- Known information and gaps
- A punishment
- A media strategy
- Fair treatment before proof
- Automatic guilt
- Public speculation
- Evidence destruction
- Invites a free narrative
- Embeds an expected answer
- Always improves memory
- Is never documented
- Can be trusted for its intended use
- Looks dramatic
- Is popular online
- Is always complete
- Practice reasoning
- Identify real suspects
- Give legal advice
- Teach evasion
- To hide gaps
- To make limitations visible
- To create a conviction
- To avoid review
- All jurisdictions are identical
- Laws and procedures can differ and change
- Notes are unnecessary
- Training never matters
Short-answer questions
- Explain why investigation is different from accusation.
- Describe two qualities of useful evidence.
- What is the role of scene documentation?
- Give two examples of neutral interview questions.
- How can a learner identify an information gap?
- Explain confirmation bias in your own words.
- Why is privacy relevant to investigation?
- What is a chain-of-custody record?
- Why should digital material be handled through authorized processes?
- Name two ways to communicate uncertainty in a report.
Scenario-based questions
- Review the Riverside Apartment case and list three competing explanations with one information need for each.
- Using the missing-person case, explain how dignity and urgency can both shape planning.
- For the payment portal case, separate verified information from assumptions.
- Create a short review checklist for any one fictional case.
- Explain how a report could fairly present a conclusion that remains uncertain.
Answer key
Multiple-choice answers
Suggested points for short answers
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
- A strong answer defines the concept, uses a relevant example, and acknowledges limits or safeguards where appropriate.
Suggested analytical points
For scenario questions, credit clear separation of facts and assumptions, identification of information gaps, alternative explanations, ethical safeguards, lawful handling, and transparent uncertainty. More than one reasonable answer may be defensible.
Key terms glossary
- Investigation
- A planned search for relevant information.
- Investigator
- A person authorized and trained to examine an issue.
- Evidence
- Material or information that may support or challenge a proposition.
- Physical evidence
- Tangible objects or traces.
- Digital evidence
- Information stored or transmitted by digital systems.
- Direct evidence
- Information that addresses a proposition directly.
- Circumstantial evidence
- Information supporting an inference from surrounding facts.
- Witness
- A person who may provide relevant information.
- Victim
- A person who experiences harm, subject to applicable definitions.
- Interview
- A structured conversation for obtaining information.
- Interrogation
- A questioning process with a distinct purpose and legal context.
- Crime scene
- A place or environment associated with an alleged event.
- Contamination
- An unwanted change to material or context.
- Preservation
- Protecting material from avoidable change.
- Chain of custody
- A record of handling, transfer, storage, and examination.
- Corroboration
- Independent information that supports or checks another account.
- Objectivity
- Fair assessment that considers supporting and contrary information.
- Confirmation bias
- Favoring information that supports an existing belief.
- Case management
- Organizing questions, information, decisions, records, and review.
References and further reading
The explanatory writing in this guide is original CRIMIVEX Academy educational content. The following are external starting points for further study; verify current pages and publications directly.
- National Institute of Justice, official criminal justice and forensic science resources: nij.ojp.gov
- United Nations Office on Drugs and Crime, official justice and crime-prevention resources: unodc.org
- National Institute of Standards and Technology, official digital forensics and measurement resources: nist.gov
- Kenya Law, official source for Kenyan legislation and legal information: kenyalaw.org
CRIMIVEX Academy
Learn. Investigate. Lead.
Criminology • Criminal Justice • Forensic Science • Cybersecurity
Independent Professional Education & Field Academy
Created by: Farah Abdi Hassan
Contact: 0141885747
This study guide is an independent educational resource created by CRIMIVEX Academy. It is not an official government, police, university, court, or law-enforcement publication. It does not constitute professional, legal, police, forensic, or investigative certification and does not replace applicable law, institutional policies, official procedures, or professional training.
Back to product