Investigations
Workflows using this tag
Cortex XSOAR Incident Response Orchestration · Palo Alto Networks
IoT Security Alert Investigation and Resolution · Palo Alto Networks
Prisma Cloud Alert Triage and Dismissal · Palo Alto Networks
Cortex XDR Endpoint Isolation and Verification · Palo Alto Networks
Cortex XSIAM Incident-Driven Asset and XQL Hunt · Palo Alto Networks
Prisma Cloud RQL Configuration and Asset Search · Palo Alto Networks
Cortex XDR XQL Threat Hunt · Palo Alto Networks
IoT Security Device Risk and Policy Recommendation · Palo Alto Networks
Business capabilities this tag reaches
Cybersecurity Management 5
Financial Crime Management 1
SaaS Platform Operations Management 1
Software Product Engineering Management 1
Variants seen in the corpus:
InvestigationInvestigations
Providers using this tag (12)
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Developing 3 Usable, with meaningful gaps to close
Emerging 4 Early or largely undocumented
Minimal 5 Almost no public developer surface
APIs with this tag (23)
Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →
Exemplar 1 Complete, well-documented, and agent-ready
Strong 4 Solid coverage with minor gaps
Cisco XDR Investigation APIThe Investigation API from Cisco XDR — 8 operation(s) for investigation.Splunk Enterprise Security APIThe Splunk Enterprise Security API provides REST endpoints for accessing and modifying findings, investigat...Amazon Web Services Investigations APIThe Investigations API from Amazon Web Services — 5 operation(s) for investigations.Alloy Investigations APIInvestigation lifecycle, assignment, review, archival, and types.
Developing 11 Usable, with meaningful gaps to close
Amazon Detective Investigations APISecurity investigation operationsTeamCity Investigations APIManage build and test investigationsDeeptrace Investigations APITrigger and retrieve asynchronous root-cause investigations.Chainalysis Crypto InvestigationsManaged investigation service where Chainalysis analysts conduct or assist with crypto-related investigatio...Chainalysis RapidAI-powered triage product for instant assessment of crypto addresses and transactions - surfaces key risk a...Chainalysis ReactorInvestigation product for tracing funds across blockchains - graph explorer, address clustering, and case m...Rapid7 InsightIDR APIREST API for the InsightIDR SIEM/XDR product covering investigations, alerts, log search, threats, and SOC ...Rapid7 Investigations APIThe Investigations API from Rapid7 — 4 operation(s) for investigations.Cybereason REST APIThe Cybereason REST API is a gated, region-scoped API hosted at api..cybereason.net that allows customers a...Montran Case ManagementAn online system for the automatic processing of all inquiries related to payments, both foreign and domest...Spyderbat Investigation APIInvestigations can be created by users as a way to have an investigation into a potential attack, allowing ...
Thin 3 Limited public surface area
Emerging 4 Early or largely undocumented
Hummingbird APILogin-gated REST API for the Hummingbird financial-crime compliance platform — used to create and manage in...Expel Workbench APIThe Expel Workbench API is a gated REST API used by customers and technology partners to integrate with the...Clearview AI Investigation ToolsClearview AI offers investigation tooling for vetted law enforcement and public-safety users that surfaces ...Sardine Case Management APIProgrammatic access to Sardine's unified case management surface for fraud and AML investigations. Cases ar...
Companies reaching this through an API (16)
These companies publish an API, specification or operation carrying “Investigations” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.
Alloy
Amazon Web Services
Cisco XDR
Cybereason
Deeptrace
Demisto
Expel
McAfee (Trellix)
Montran
Palo Alto Networks
Rapid7
Sardine
Securonix
Splunk
Spyderbat
TeamCity
Score breakdown
Frequency
45.8
log-scaled weighted occurrences
Breadth
0.3
spread across providers
Quality lift
24.1
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor
Related tags
SOAR 5 co-occurrences
Vulnerabilities 5 co-occurrences
SIEM 5 co-occurrences
Threat Detection 7 co-occurrences
Threat Intelligence 6 co-occurrences
Alerts 5 co-occurrences
Cybersecurity 9 co-occurrences
Where this tag comes from
Api tag23
Provider tag12
Openapi tag10
Openapi op tag30
Work with this as data
Every tag here is available over the APIs.io API and to AI agents over MCP.