The 3 C's of a successful security investigation