SearchIocs answers "which investigations mention this IOC": every
investigation in the requested environments that recorded the IOC, with
its current disposition. Hostname IOCs match subdomains by default
(exact=true restricts); file hashes and IPs always match exactly. The
returned investigation ids resolve against GetResult / GetGraphState.