more investigation tests with single/multiple/none incidents