CPM forensic analysis