Skip to main content

List investigations

GET 

/api/security/investigations

What people are working on right now, from three existing tables (nothing is stored for it): findings in status investigating; incidents that are open (new / investigating / reopened, the one definition of open); shadow candidates that are escalated or assigned and not resolved or suppressed. Newest update first, keyset pagination. status only accepts open.

Request​

Responses​

Successful Response