Investigation order: preserve, scope, contain.
