I think it entails investigating a broad range of cybercrime cases and figuring out how they did the crime or finding out what crime they committed.  You are analyzing evidence and further exploring the data to link the person to the case or to find out how they did it.