Summary. With the rise of Web 2.0 vast amounts of textual data are generated every day. Micro-blogging streams and forum posts are ideally suited for signalling suspicious events. We are investigating the use of classification techniques for recognition of suspicious passages. We present CBSSearch, an experimental environment for text-stream analysis. Our aim is to develop an end-to-end solution for creating models of events and their application within forensic analysis of text-streams