Investigation WorkflowGlobal investigation of application usage, indicators of compromise and other enhanced metadata