Re: Need for Investigation/Tag object?

status
      Optional.  ENUM.  The status attribute conveys the state in a
      workflow where the incident is currently found.  These values are
      maintained in the "Incident-status" IANA registry per Table 1.
      This attribute is defined as an enumerated list: