5 building blocks of investigation