> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Investigation Details

Retrieve investigation metadata by ID.

<Note>
  External Documentation

  To learn more, visit the [Proofpoint Threat Response Auto Pull documentation](https://ptr-docs.proofpoint.com/extensibility-guides/ptr-api/#get-investigation-details).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter        | Description                                           |
  | ---------------- | ----------------------------------------------------- |
  | Expand Events    | Retrieve investigations with events data expanded.    |
  | Expand Incidents | Retrieve investigations with incidents data expanded. |
  | Investigation ID | The ID of the investigation to retrieve.              |
</div>

## Example Output

```json theme={"dark"}
{
	"id": 1,
	"created_at": "2021-01-08T17:20:07Z",
	"updated_at": "2021-03-11T05:49:15Z",
	"name": "test",
	"assignee": "System Administrator",
	"team": "Script Admins",
	"description": "asdadad",
	"investigation_field_values": [
		{
			"name": "Classification",
			"value": "Malware"
		},
		{
			"name": "Severity",
			"value": "Informational"
		},
		{
			"name": "Attack Vector",
			"value": "Email"
		},
		{
			"name": "IS-Unknown",
			"value": "False"
		}
	],
	"incident_ids": [
		132,
		124
	],
	"incidents": []
}
```

## Workflow Library Example

[Get Investigation Details with Proofpoint Threat Response Auto Pull and Send Results Via Email](https://library.blinkops.com/workflows/get-investigation-details-with-proofpoint-threat-response-auto-pull-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/get-investigation-details-with-proofpoint-threat-response-auto-pull-and-send-results-via-email/canvas" />
</div>