Investigation standards report

Summary
Investigations and case building in support of attribution