Authored by: Rimkus Forensics Marketing Team
Published 4/24/2026
A stain appears on a third-floor ceiling after a storm. The contractor opens the drywall, finds no obvious source, recaulks the nearest window, and closes it up. Six months later, the stain is back, and the claim file is now on its third reserve adjustment. The problem was rarely the repair itself; it was that no one separated the point of entry from the path of travel. In that building, the water entered at a parapet coping four stories above the visible damage.
Claims managers, coverage counsel, and litigation attorneys routinely inherit matters like that one, where moisture claims have already cycled through one or two failed repairs before a forensic investigator is retained.
The sections that follow cover what causes moisture intrusion, the signs practitioners look for, how investigations proceed, and how investigators document findings using recognized methodologies and industry standards.
Key takeaways: Why moisture intrusion may warrant forensic-level investigation
Moisture claims often hinge on identifying the point of entry, recreating leak conditions when appropriate, and documenting observations, testing, and conclusions in a methodical manner. Fault lines appear early: governing standards and preparatory review.
What should claims professionals and attorneys know first?
These affect standard application and where investigations break down.
- ASTM E2128-20 covers wall water leakage; AAMA 511 covers fenestration
- Rule 702 and Daubert generally focus on whether reliable principles and methods were appropriately applied to the facts of the case, rather than whether a standard was merely cited
- Testing without document review may produce test-induced leaks unrelated to failures
How do forensic moisture investigations typically proceed?
Steps run from documents to causation.
- Document review, design evaluation, and inspection precede water application
- Non-destructive survey triangulates IR, meters, and borescope before demolition
- Causation separates design, construction, material, and maintenance defects
Where a forensic-level investigation could clarify a moisture matter, contact Rimkus.
What is moisture intrusion?
ASTM E2128-20, the standard guide for evaluating water leakage of building walls, draws four distinctions field investigators encounter routinely. Incidental water penetrates the primary barrier but escapes through a functioning drainage plane without consequence. Water absorption is taken into a material’s pores and held without transmission.
Water infiltration passes through or between materials and reaches a space not intended to be exposed to the water source. Water leakage, the one that usually gets litigated, is uncontrolled water that exceeds the resistance, retention, or discharge capacity of the system, or causes damage or premature deterioration.
Those distinctions matter because a wall assembly is designed to do something with water, not to be perfectly watertight. Forensic envelope investigation covers barrier walls, drainable walls, and pressure-equalized rain screens, each with a distinct failure profile.
What causes moisture intrusion in buildings?
Three causation factors typically shape a failure profile: the physical forces moving water, the transition details where leaks originate, and the sources that sit outside the wall but present as wall leakage.
What forces move water through a wall?
Seven forces drive water through a building skin, as catalogued in Christine Beall’s IIBEC Interface article on water penetration:
- gravity
- air currents
- capillary suction
- surface tension
- kinetic energy from wind-driven rain
- air pressure differentials
- hydrostatic pressure
Which forces were present during the reported events informs both hypothesis and test protocol. Which force dominates depends on the wall and the event.
Capillary action is often a significant contributor to water penetration in porous masonry systems, although the dominant mechanism may vary depending on construction details and environmental conditions. Rain screens equalize pressure across the drainage plane to limit that mechanism; barrier walls without equalization have narrower tolerance for sealant defects.
Where do commercial envelope leaks originate?
Most commercial envelope leaks trace back to a short list of transition details: head and sill flashing at punched windows, curtain wall-to-slab interfaces, parapet copings, through-wall flashings at shelf angles, roof-to-wall transitions, and balcony or deck-to-wall waterproofing terminations. A Federal Emergency Management Agency (FEMA) recovery advisory on Hurricane Ian flagged shingle-style flashing lap failures at wall penetrations as one of the most frequent deficiencies, consistent with what investigators see in routine non-storm work.
What sources fall outside ASTM E2128’s scope?
ASTM E2128 section 4.3 places three sources outside its scope: roof leakage, below-grade leakage, and condensation from water vapor migration. Practitioners encounter these regularly in matters that present as wall leakage.
Below-grade intrusion driven by hydrostatic pressure may produce interior staining that looks like wall failure; condensation from undersized dehumidification, duct leakage, or thermal bridging may produce similar symptoms.
Separating them at intake is part of a defensible investigation. The building envelope issues overview covers these failure modes in more detail.
What are the signs of moisture intrusion?
Water staining, efflorescence, peeling paint, musty odor, and warped finishes are symptoms, not sources. By the time they are visible, water may have already traveled along framing, down the back of sheathing, or along a through-wall flashing until it found a gap to exit. Framing an investigation around the visible stain is a common path to test-induced leaks unrelated to the actual failure mode.
How is moisture intrusion investigated?
Routine visual inspection is unlikely to locate most concealed leak paths. Forensic investigation is document-driven, hypothesis-led, and designed to produce findings defensible under the rules of evidence. Forensic services work in this area follows the ASTM E2128 structure, subordinate test standards, and a staged diagnostic sequence, informed by broader experience with building defects.
What does a proper ASTM E2128 investigation require?
ASTM E2128 lays out seven sequential activities. The first four happen before any water is applied: review of project documents (including submittals, shop drawings, and maintenance records), evaluation of design concept, determination of service history, and inspection. Skipping those steps can limit the investigator’s understanding of the assembly, service history, and potential failure mechanisms, increasing the risk of incomplete or misleading conclusions.
What is the scope of subordinate test standards?
ASTM E1105 is the standard for field water penetration testing of installed fenestration under static air pressure differential, using Procedure A (uniform) or Procedure B (cyclic). ASTM E1105 is commonly used as a controlled field test for evaluating water penetration resistance under specified conditions rather than as a direct simulation of natural rainfall events: Note 3 acknowledges that the specified spray rate corresponds to roughly 8 inches per hour, more than double the greatest 1-hour rainfall in the contiguous 48 states. AAMA 511 builds on E2128 for fenestration and introduces the optional sill dam test, which field practice flags as potentially exceeding natural weather conditions. Using that test without qualifying the distinction can create cross-examination exposure.
What is the diagnostic sequence?
Non-destructive survey comes first. Infrared thermography identifies temperature differentials associated with trapped moisture, but IR is a screening tool, not a diagnostic one. As IIBEC contributors have noted in Interface water testing coverage, IR findings need confirmation with moisture meters, pin probes, or borescope observation.
Water recreation testing follows. The standing rule is to start at the bottom of the test area and work upward in isolated zones, typically 3 to 6 inches at a time, masked off with plastic or tape. Starting at the top introduces water above the suspect detail and can make it difficult to distinguish a real failure from runoff overspray. Destructive testing follows after non-destructive phases are complete and written owner consent is obtained. Opening an assembly prematurely may alter the evidence and, in active claims, can create spoliation exposure.
Why does moisture intrusion require expert testimony?
Courts have grown increasingly specific about what a defensible envelope investigation looks like; what typically matters is whether the expert followed a standard’s methodology or merely cited it. Common credentials that come up during expert testimony services and qualification voir dire include IIBEC registrations (roof, waterproofing, and exterior wall consulting) and state Professional Engineer licensure.
Credentials alone do not satisfy the evidentiary test, however. Federal Rule of Evidence (FRE 702) requires that expert testimony rest on sufficient facts or data, reliable principles and methods, and reliable application of those methods to the specific case facts. That last clause does most of the work, and the Daubert line of cases explains why.
How does Daubert apply to moisture investigations?
Under Daubert v. Merrell Dow Pharmaceuticals (509 U.S. 579, 1993), the four non-exhaustive reliability factors are testability, peer review, known or potential error rate, and general acceptance. Kumho Tire Co. v. Carmichael (526 U.S. 137, 1999) extended the court’s gatekeeping function to engineering and other technical experience-based testimony.
In moisture work, this generally requires the expert to show their work. That means a record of E2128 activities performed, documents reviewed, hypothesis formed, and test pressure applied in what sequence. It also means explaining how the observed test result corresponds to the reported natural leakage. A report that cites E2128 without documenting the basis for its investigative approach may face additional scrutiny regarding methodology and application.
Why does mechanism identification matter in claim resolution?
Mechanism identification is the process of determining how water actually entered the building, not just where it appeared inside. It answers the causation question that sits behind every water intrusion claim: which component failed, in what sequence, and why.
Beyond courtroom survival, the report should address the underlying claim question. Building owners know water is getting in; insurers and counsel typically need the mechanism. Four categories carry different responsible parties, coverage analyses, and repair scopes: design defect, construction defect, material failure, and maintenance condition. A flashing installed out of sequence is typically evaluated as a construction defect; a flashing specified so it cannot be installed correctly as a design defect; a sealant past service life that was never recaulked as a maintenance condition.
Getting the mechanism right can also affect the scope of repair. A claim that presents as an isolated window leak may reveal a systemic air barrier continuity failure affecting an entire elevation. Repairing the window may not address the underlying condition, and a second claim can arrive with the next storm. Proper construction defect investigation may catch that mismatch before the wrong repair gets written.
How does forensic investigation support more defensible outcomes?
Investigations that are thoroughly documented typically include document review before testing, controlled testing protocols, recorded test conditions, and a clear explanation of how observations relate to reported conditions. That same discipline informs the proactive side of this work: envelope commissioning and condition assessments within built environment solutions aim to catch these conditions before they produce a claim. Where a standards-based investigation or independent evaluation would be beneficial, contact Rimkus to discuss moisture intrusion investigation services.
Frequently asked questions
How can moisture intrusion affect a building’s structural components?
Progressive wetting of concealed framing is commonly associated with decay in wood members, corrosion of steel fasteners, freeze-thaw spalling in masonry, and delamination in concrete. Concentrated decay at connection points tends to matter most, because load paths can fail where elements join.
What tools do forensic investigators use during a moisture intrusion investigation?
Common investigative tools include moisture meters, thermal imaging cameras, borescopes, hygrometers, and testing equipment used for standards-based water penetration evaluations. Investigators typically use multiple tools together because no single instrument can independently determine the source or mechanism of moisture intrusion.
How can building owners reduce the risk of moisture intrusion?
Risk tends to drop when the four control layers (water, air, vapor, thermal) stay continuous at every transition, supported by flashing, capillary breaks, and a correctly positioned vapor retarder. Inspection cycles at sealant joints, flashing terminations, and drainage paths catch most vulnerabilities before they migrate into concealed assemblies.
This article is intended to provide general information and insights into prevailing industry practices. It is not intended to constitute, and should not be relied upon as, legal, technical, or professional advice. The content does not replace consultation with a qualified expert or professional regarding the specific facts and circumstances of any particular matter.