INVESTIGATION CATALYST
Investigation Task Help

© 2004 by Starline Software Ltd.

ACQUIRING EVENT BLOCKS

The challenge: transform observed data into useful information.

DOCUMENTING OBSERVATIONS

An investigator must be able to acquire and transform observed investigation data into the documented building blocks needed to develop investigation work products. This documentation challenge generally stated is to:

  1. Observe and list by unique name the people and objects (actors) whose actions during the occurrence resulted in the outcome of interest.
  2. Determine what each actor did during the occurrence.
  3. Record each action advancing the process toward its outcome as a building block in a format suitable for describing, analyzing and explaining the progressive interactions that occurred.
  4. Document and preserve the sources of the recorded building blocks.
Data Language

The fundamental component of the MES process is the data language on which all other elements depend. This data language is defined by the Event Block (EB). An EB is one action by one person or object, or

1 actor + 1 action = 1 Event Block.

For investigations, action should be active voice, past tense. For system operation description, action should be active voice, present tense.

Data Tramsformation

The EB creation task is to create EBs from whatever data can be acquired from any sources during the investigations. Investigators explore surviving sources for data they can transform into EBs. The data preserved in the source is acquired and absorbed by the investigator, who processes it to produce EBs. Many sources may have captured and preserved data about the phenomenon, as shown below:

The Investigator's Data Transformation Task
Reading data sources

Extracting EBs from each kind of source requires common skills but different knowledge about the sources. For example, to acquire EBs from a person or object, investigators need have the skill to develop questions to ask, to visualize the data they get as a "mental movie," which is a form of reproducing the process, to document and verify the data they acquire, and to "read" people during interviews or objects during examinations.

Change analysis tool

Change analysis is another tool that investigators can use to identify the changes of state that occurred during an occurrence, and the actors and actions that produced those changes of state. With change analysis, the investigator compares the state before and after the occurrence to identify the change(s) that occurred. As each change is identified, data is examined to try to determine who did what to produce the change. The method and an example of its application is provided by Starline at
http://www.starlinesw.com/product/Guides/MESGuide04.htm.

Expert help

Extracting EBs from objects may require expert help from people who know the systems and their behaviors, or testing of some kind to read the data which the object contains. See the next section for test plan design.

In addition to people and objects, energy may provide a source for new EBs because energy can and does do work which affects people or objects or what they do. For more information about acquiring EBs from energy, see
http://www.starlinesw.com/product/Guides/MESGuide05.html.


Previous | Next | Help Menu