I don’t think that’s necessarily always true. There are plenty of scenarios where investigators pretty much know the motive before they find the culprit: robberies, crimes of passion, signs of forced entry, etc. I’m not a cop but whether you an investor sees certain signs will point an investigation in one direction or another. Anchor thinking is always dangerous because it can subconsciously cause someone to discount contradictory evidence.