Investigations are tracked cases in Enforce that tie a subject user to a threat signal and the work your team does to assess and resolve it. The Investigations page groups them by workflow state so you can see what is active, what is waiting for assignment, and what is closed.Documentation Index
Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
Use this file to discover all available pages before exploring further.

Investigations view may have a different look and interface if you’re not using TruU Passwordless. So kindly use this documentation as only a reference in that case.
Overview
An investigation represents a single enforcement case: who is involved, what kind of threat the platform surfaced, a short narrative summary (typically AI-generated), and who opened or is working it. Investigations are the operational record that connects risk assessment in Predict to resolution and enforcement actions.Investigation Cards
Each card surfaces the investigation ID (for exampleINV-C2B36584-C000-46A…) for reference in tickets and audits. The subject is shown by name. A threat type badge summarizes the category at a glance. A description gives the investigation summary.
Avatars indicate who opened the case or is collaborating. The footer shows status and relative time (for example “You opened | a month ago”). Use the more menu (three dots) for actions specific to that investigation.

