How does the police investigate cyber crimes?

Hello Everyone!


If the case is internet based, finding the IP address is the first step of the investigation as far as I know. An IP address consists of the numbers and letters, and that series is attached to any data moving through the internet. In order to retrieve an IP address from some Internet service provider, we'll need a warrant.

This is one of the steps I know so far, DO YOU GUYS KNOW SOME OTHER WAYS OF HOW THE POLICE INVESTIGATE CYBER CRIMES?