Find an existing investigation

Locate the right record before adding evidence or making updates.
This guide explains how to locate the right record before adding evidence or making updates. It outlines the preparation, practical steps and checks that help keep your work accurate and traceable within ICAM Plus.
The exact controls available can depend on your active Personal or Organization workspace, subscription, investigation status and assigned permissions. Follow the current application labels where they differ from the descriptions below.
Before you begin
Sign in using an authorized ICAM Plus account. Confirm the correct workspace and, where applicable, the investigation and organizational role. Keep the relevant incident facts or account details available without exposing passwords, tokens or unnecessary sensitive information.
Step-by-step instructions
Step 1 — Select the workspace that owns the investigation.
Confirm that the selected context is the one in which the record should be owned and accessed. Personal and Organization workspaces are separate; do not assume that switching workspaces moves existing investigations.
Step 2 — Open the investigation list.
Complete this action using the controls available to your role and current application version. Check the resulting record before continuing, and document anything incomplete or inconsistent for follow-up.
Step 3 — Use search and available status filters.
Treat any generated result as assistance, not as a verified finding. Compare claims with source investigation data, record uncertainties and retain investigator judgment.
Step 4 — Compare the event title, date and site when visible.
Use the best-supported date and time available; clearly distinguish verified information from estimates or unconfirmed recollections. Revisit the entry if additional evidence changes the sequence.
Step 5 — Open the matching record and check its status before editing.
Complete this action using the controls available to your role and current application version. Check the resulting record before continuing, and document anything incomplete or inconsistent for follow-up.
Confirm the expected outcome in the application before leaving the screen. Keep a record of any missing information or blocked action rather than treating the task as completed.
Important considerations
Available search and filter controls can vary by build.
Avoid: Mistaking a similarly titled investigation for the right one.
Avoid: switching workspaces without noticing.
Troubleshooting
The option is missing or unavailable
Verify your workspace, role, current investigation stage and subscription availability. A hidden or disabled control is not permission to bypass the intended workflow.
The expected change is not visible
Check the relevant record and selected filters. Confirm whether the operation was saved or submitted. Avoid repeating changes that may create a duplicate; if the problem persists, document what you can observe.
You still cannot complete the task
Use the official Contact Support route. Include the app platform and version, affected workflow, expected result, actual result and a sanitized error message when available. Never include passwords, API tokens or unnecessary personal data.
Expected outcome
The opened investigation is the intended record.
Related guides
G01 — Choose the correct workspace
G21 — Troubleshoot a missing investigation
Further assistance
If the task remains blocked, navigate to Contact Support through the approved ICAM Plus help route. Describe what you attempted, what happened and which investigation or account area is affected, using only the minimum information needed.



Comments