Skip to content

/AWS1/CL_DET=>GETINVESTIGATION()

About GetInvestigation

Detective investigations lets you investigate IAM users and IAM roles using indicators of compromise. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident. GetInvestigation returns the investigation results of an investigation for a behavior graph.

Method Signature

IMPORTING

Required arguments:

IV_GRAPHARN TYPE /AWS1/DETGRAPHARN /AWS1/DETGRAPHARN

The Amazon Resource Name (ARN) of the behavior graph.

IV_INVESTIGATIONID TYPE /AWS1/DETINVESTIGATIONID /AWS1/DETINVESTIGATIONID

The investigation ID of the investigation report.

RETURNING

OO_OUTPUT TYPE REF TO /AWS1/CL_DETGETINVESTIGATION01 /AWS1/CL_DETGETINVESTIGATION01