when investigating a potential e-mail crime what is your first step in the investigation