investigation workflow