refactor get /investigation to cover API