investigation-vocab
===================

**Evidence Found** (1)

    Evidence relevant to the incident is found (e.g., fellow employee found a USB drive left in the insider's computer that had sensitive company files downloaded on to it)

**Insider Admits to Activity in Interview** (2)

    Insider admits to involvement in insider incident while being interviewed by investigators about the incident (or related activity)

**Insider's Residence/Workplace Searched** (3)

    Investigators search the insider's home or workplace for evidence related to the incident

**Case Opened Internally** (4)

    The victim organization open a case to investigate the insider

**Case Opened with Law Enforcement** (5)

    Law enforcement opened a case to investigate the insider

**Insider Interviewed** (6)

    Insider is interviewed about the incident by investigators