Fibre evidence – addressing the difficult questions of when and how an incident occurred