threat investigation notes