How to Investigate a Crime Scene Step by Step

Investigating a crime scene step by step means moving through a fixed sequence: get legal authority to be there, secure the area, protect the people working it, walk through before touching anything, document the scene in full, collect and package evidence with proper chain of custody, and send it to the laboratory for analysis. The order is not a suggestion. Skipping ahead or reversing steps is how evidence gets suppressed, how DNA results get thrown out, and how prosecutions fall apart before they reach a jury.

Step 1: Establish Legal Authority to Search

Before anyone touches evidence, investigators need lawful grounds to be inside the scene. The U.S. Supreme Court held in Mincey v. Arizona that there is no general “crime scene exception” to the Fourth Amendment’s warrant requirement. A homicide, by itself, does not authorize a warrantless search of a home.¹

Officers arriving at a scene can act without a warrant in narrow circumstances: entering to help injured people, checking whether a suspect is still inside, and securing the area so evidence is not destroyed. Anything they see during those emergency actions falls under the plain view doctrine and can be lawfully seized. When the emergency ends, the authority to search without a warrant ends with it. The Court required that any warrantless search be “strictly circumscribed by the emergencies which justify its initiation.”²

Once victims are out and the premises are secured, investigators must obtain a search warrant before continuing to process the scene. They can hold the location for a reasonable time while the warrant is prepared. They cannot keep searching. A detective who processes a bedroom for three hours without a warrant hands the defense a suppression motion.

Step 2: Secure the Scene and Control Access

With legal authority established, the priority is locking down the area. Every person who walks through a scene tracks in shoe prints, sheds hair and fibers, and can move or destroy evidence.

Securing a scene means establishing a perimeter, usually with barrier tape, that restricts access to authorized personnel. Many agencies use layered boundaries: an outer perimeter that holds back the public, a staging area for equipment, and an inner core containing the evidence itself. Size depends on the incident. An outdoor shooting scene needs a much wider perimeter than a burglary in a single room.

Every person entering the secured area gets logged. A crime scene entry log records name, agency or role, and times of entry and departure. That record both limits how many people approach the evidence and creates a paper trail of who was in a position to handle or contaminate anything.³

First responders also control the people already at the scene. Witnesses, victims, and bystanders should be identified and their contact information recorded. Keeping witnesses separated from one another prevents them from unintentionally influencing each other’s recollections, and moving people away from the core scene reduces accidental evidence destruction.⁴

Step 3: Protect the Investigators

Crime scenes carry real physical hazards independent of any suspect. Blood, bodily fluids, drug residues, and structural risks all threaten the people processing the scene.

OSHA’s bloodborne pathogens standard requires employers to provide personal protective equipment at no cost when occupational exposure to blood or other infectious materials is reasonably anticipated. That equipment includes gloves, gowns, face shields or masks, and eye protection, and it must prevent blood or infectious materials from reaching the worker’s skin, eyes, mouth, or clothing.⁵ Agencies also have to maintain an Exposure Control Plan and track needlestick and sharps injuries.⁶

Synthetic opioids add a newer risk. When fentanyl or related substances are suspected, the DEA recommends wearing gloves at a minimum. If small amounts of powder are visible and could become airborne, investigators should add a NIOSH-approved respirator and eye protection while minimizing skin contact. Larger scenes involving distribution operations, clandestine labs, or significant spills trigger department-specific protocols. The overriding rule is to avoid any action that could send powder into the air.⁷

Step 4: Conduct the Initial Walk-Through

Before any evidence is collected, the lead investigator walks the scene with the processing team. The walk-through uses a single established entry path to avoid contaminating untouched areas, and it does several jobs at once. It gives the team a mental map. It identifies fragile evidence that needs immediate attention. It flags safety hazards. And it sets the scope of the work ahead, including how many evidence technicians will be needed and who handles what.⁴

During the walk-through, investigators note transient evidence like smells, sounds, or temperature, because those observations disappear fast. Items at immediate risk from weather, foot traffic, or other environmental factors get documented, photographed, and collected right away, ahead of the full systematic processing.

Step 5: Document the Scene Before Moving Anything

Thorough documentation freezes the scene in its original state so investigators, attorneys, judges, and jurors can later see exactly what was there and where. Three overlapping methods do the work: photography, sketches with measurements, and written notes. Each captures information the others miss.

Photography

Crime scene photography moves from wide to narrow. Overall photographs establish the location and surroundings, including street signs, building exteriors, and general layout. These wide shots show the scene as first encountered, before markers or scales are added.⁸

Mid-range photographs then show spatial relationships between evidence items and fixed landmarks, giving context for the close-ups. Close-up photographs fill the frame with individual items. When size matters, a measurement scale is placed alongside the item, but a photograph without the scale is always taken first to prove the scale did not obscure anything underneath.⁸ Numbered evidence markers work the same way: each view is photographed twice, once without the marker and once with it, so nothing is hidden from later review.

Sketches and Measurements

Photographs show what a scene looked like, but they distort distances. Sketches record precise measurements between evidence and fixed reference points like walls, doors, or utility poles. The NIJ guide calls for sketches that include case identifiers, a north indicator, the location of each evidence item correlated with the evidence record, room dimensions, furniture placement, and distances to adjacent structures.⁴

Investigators pick a measuring technique to fit the space. Rectangular coordinates measure from two fixed points at right angles. Triangulation measures from two fixed points to form a triangle around each item. For large outdoor scenes, a transecting baseline stretched between two fixed positions lets each item be measured at a right angle from the tape.

3D Laser Scanning

Three-dimensional laser scanning has become a common supplement. These scanners capture the entire environment with measurements accurate to roughly one millimeter, well beyond manual tape work. The larger advantage is that the data lets investigators virtually revisit the scene long after it has been released. In studies comparing documentation methods, both laypeople and forensic professionals preferred 3D video presentations over photographs or sketches.⁹

Written Notes

Notes provide the narrative that ties everything together: time of arrival and departure, condition of the scene on arrival, weather and temperature, and any transient evidence like odors or unusual sounds. Notes also record any circumstance that forced a deviation from standard procedure, which matters if the defense later challenges how the scene was processed.⁴

Step 6: Collect and Package Evidence

Only after documentation is complete does systematic collection begin. How evidence is collected determines whether it will be admissible and useful. Different categories, including biological samples, trace materials, latent prints, firearms, and digital devices, each require specific handling.

Biological Samples

DNA evidence is unusually sensitive. Blood, saliva, and other biological samples should be air-dried before packaging whenever possible, because moisture accelerates degradation. If a sample cannot be fully dried at the scene, it should go into a leak-proof container for transport to a drying facility, then be repackaged in paper and stored as cold as conditions allow.¹⁰

Packaging and Labeling

Each item goes into its own container to prevent cross-contamination. The container matches the evidence: paper bags and envelopes for most dry items, rigid containers for fragile materials, and nonporous packaging only when the item is already dry. Every container is sealed and labeled with the item description, the date and time of collection, who collected it, and its location within the scene. Firearms and other items needing special handling are documented in their found condition before being rendered safe for transport.⁴

Digital Devices

Phones, laptops, tablets, and other connected devices raise a problem physical evidence does not. A phone in an evidence bag can receive a remote-wipe command over a cellular network and destroy its contents. To block that, investigators place wireless-capable devices in Faraday bags, which cut off cellular, Bluetooth, and Wi-Fi signals. Running a power cord through the opening defeats the shielding because the cord acts as an antenna. When Faraday bags are unavailable, multiple tight layers of aluminum foil serve as a rough substitute, though less reliably.

Electronically recorded evidence at the scene, including surveillance footage, answering machine recordings, and computer data, should also be identified and secured during the initial walk-through, before it can be overwritten or lost.⁴

Step 7: Maintain Chain of Custody

Collecting evidence properly means nothing without the ability to prove it stayed untampered with between scene and courtroom. Chain of custody is the recorded history of every person who handled a piece of evidence, every place it was stored, and every transfer that occurred. Its purpose is to prevent substitution, tampering, contamination, or misidentification.¹¹

Every person who touches the evidence must be identified. Every period of custody must be accounted for. Laboratories receiving evidence must store it in controlled facilities and limit how many people come in contact with it.

When the chain breaks, the consequences are serious. Evidence with a compromised chain may be excluded from trial entirely, or a judge may issue a limiting instruction telling the jury to give it less weight.¹¹ Investigations often fall apart here, not because evidence was collected poorly, but because someone failed to document a transfer.

Step 8: Laboratory Analysis

Once evidence reaches the laboratory, forensic scientists apply specialized techniques to extract information that can identify individuals, reconstruct events, or confirm witness accounts. DNA analysis links biological samples to specific people. Fingerprint examination compares latent prints to known prints on file. Ballistics testing determines whether a particular firearm discharged a recovered bullet or casing. Toxicology screens detect drugs, alcohol, or poisons in bodily fluids. Bloodstain pattern analysis studies size, shape, distribution, and location of stains to determine where a person was positioned when bleeding occurred and what type of force produced the pattern.

The reliability of results depends on the laboratory producing them. Forensic labs pursue accreditation under ISO/IEC 17025 and related standards, which evaluate competence, impartiality, and consistent operations. Accreditation bodies such as ANAB use subject matter experts in each discipline to assess laboratories, and ANAB operates under a memorandum of understanding with the FBI to accredit labs participating in the National DNA Indexing System.

One caveat matters for anyone trying to understand how strong a given result is: there is currently no nationally mandatory accreditation requirement for forensic service providers in the United States. The system relies on voluntary compliance with international standards, and defense attorneys regularly challenge results from unaccredited facilities.¹²

What Happens When Steps Get Skipped

The consequences of shortcuts cascade through the case. An illegal search without a warrant leads to suppression of what was found. Contaminated biological samples produce unreliable DNA results. A broken chain of custody opens the door to arguments that evidence was tampered with or mislabeled. Inadequate documentation leaves no way to verify where an item was found or in what condition. Courts do not require perfection, but they do require that investigators follow established protocols and document what they did and why. The strongest investigations are the ones where every step is recorded, every transfer is logged, and every deviation from procedure is explained in writing.

1
Legal Information Institute. Mincey v. Arizona, 437 US 385
2
Federal Law Enforcement Training Centers. A Murder Scene Exception to the 4th Amendment Warrant Requirement
3
National Institute of Standards and Technology. Standard for Initial Response at Scenes by Law Enforcement
4
Office of Justice Programs. Crime Scene Investigation – A Guide for Law Enforcement
5
eCFR. 29 CFR 1910.1030 – Bloodborne Pathogens
6
Occupational Safety and Health Administration. Bloodborne Pathogens – Standards
7
Drug Enforcement Administration. Fentanyl Safety Recommendations for First Responders
8
National Institute of Standards and Technology. Standard Guide for Crime Scene Photography
9
National Institute of Justice. Crime Scene Documentation – Weighing the Merits of Three-Dimensional Laser Scanning
10
National Institute of Justice. What Every Investigator and Evidence Technician Should Know About DNA Evidence – Air-dry Evidence
11
National Institute of Justice. Law 101 – Legal Guide for the Forensic Expert – Chain of Custody
12
National Institute of Standards and Technology. Demystifying Accreditation – A Framework for Accreditation of Forensic Units