Close investigation
close_investigationCloses the browser context and egress proxy for an investigation, freeing resources while keeping evidence and artifacts available until retention ends.
Instructions
Closes the browser context and egress proxy of an investigation. Evidence and artifacts remain available for analysis and reports until the retention period ends.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| investigationId | Yes | Id returned by start_investigation |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| state | Yes | ||
| retainedUntil | Yes | ||
| investigationId | Yes |