Skip to main content
Get a list of all created investigations.
External DocumentationTo learn more, visit the Intel Owl documentation.

​
Example Output

{
	"count": 2,
	"total_pages": 1,
	"results": [
		{
			"id": 3,
			"tags": [],
			"tlp": "CLEAR",
			"total_jobs": 0,
			"jobs": [],
			"status": "created",
			"for_organization": true,
			"name": "Custom investigation",
			"description": "",
			"start_time": "2025-08-25T14:40:16.123345Z",
			"end_time": null,
			"owner": "aaa"
		},
		{
			"id": 2,
			"tags": [],
			"tlp": "CLEAR",
			"total_jobs": 0,
			"jobs": [],
			"status": "created",
			"for_organization": true,
			"name": "Custom investigation",
			"description": "",
			"start_time": "2025-08-24T14:22:06.865621Z",
			"end_time": null,
			"owner": "aaa"
		}
	]
}

​
Workflow Library Example

List Investigations with Intel Owl and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop
⌘I