Use batch endpoints for bounded, per-item threat investigation at scale.
Batch endpoints help agents process multiple entities or claims while preserving per-item uncertainty.
Available Batch Endpoints
Endpoint
Use
/v2/entity-resolution/batch
Resolve multiple inputs
/v2/evidence/batch
Retrieve evidence for multiple claims
/v2/relationships/batch
Pivot relationships for multiple subjects
/v2/assessments/batch
Run multiple deterministic assessments
Limits and Scopes
API schema caps are 1..50 items per batch. Plans or MCP clients may enforce smaller limits. Batch endpoints require the read scope and the matching batch:* scope.
Reporting Guidance
Return item-level status. Do not collapse ambiguous, failed, or low-confidence items into a single success summary.
Was this page helpful?
⌘I
{"docsConfig":{"theme":"almond","$schema":"https://mintlify.com/docs.json","name":"Developer Portal","description":"Install Kyberis and use deterministic, evidence-backed threat intelligence for AI agents. Resolve threat entities, retrieve bounded evidence, pivot relationships, and run LLM-free CVE, IOC, actor, and environment assessments via REST APIs and MCP.","colors":{"primary":"#34E0D4","light":"#34E0D4","dark":"#04415a"},"logo":{"light":"https://mintcdn.com/kyberis/u7saXgSwhIjXsY7P/images/KYBERISLightBG(1).png?fit=max\u0026auto=format\u0026n=u7saXgSwhIjXsY7P\u0026q=85\u0026s=66da6f97e851defcb12af05b800a8a27","dark":"https://mintcdn.com/kyberis/u7saXgSwhIjXsY7P/images/KYBERISDarkBG(1).png?fit=max\u0026auto=format\u0026n=u7saXgSwhIjXsY7P\u0026q=85\u0026s=37df025ce7a3cc54dd90f8edad1cf54f","href":"https://kyberis.ai"},"favicon":{"light":"https://mintcdn.com/kyberis/31y_X715yWq2hnS2/images/kyberis-shield(1).png?fit=max\u0026auto=format\u0026n=31y_X715yWq2hnS2\u0026q=85\u0026s=5a2f7c08c0a864c766cba00189200d98","dark":"https://mintcdn.com/kyberis/31y_X715yWq2hnS2/images/kyberis-shield(1).png?fit=max\u0026auto=format\u0026n=31y_X715yWq2hnS2\u0026q=85\u0026s=5a2f7c08c0a864c766cba00189200d98"},"appearance":{"default":"dark","strict":false},"background":{"color":{"light":"#1D2839","dark":"#0D1220"}},"navbar":{"links":[{"href":"mailto:[email protected]","label":"Support"},{"href":"https://kyberis.ai/get-started","label":"Start Free"}],"primary":{"type":"button","label":"Sign In","href":"https://app.kyberis.ai"}},"footer":{"socials":{"linkedin":"https://www.linkedin.com/company/kyberis-ai"},"links":[{"header":"Product","items":[{"label":"Why Kyberis","href":"https://kyberis.ai/why-kyberis"},{"label":"How It Works","href":"https://kyberis.ai/how-it-works"},{"label":"Pricing","href":"https://kyberis.ai/pricing"}]},{"header":"Company","items":[{"label":"About","href":"https://kyberis.ai/about"},{"label":"Sign In","href":"https://kyberis.ai/sign-in"},{"label":"Start Free","href":"https://kyberis.ai/get-started"}]},{"header":"Legal","items":[{"label":"Privacy Policy","href":"https://kyberis.ai/privacy"},{"label":"Terms of Service","href":"https://kyberis.ai/terms"}]}]},"fonts":{"heading":{"family":"Inter","weight":700},"body":{"family":"Inter","weight":400}},"integrations":{"posthog":{"apiKey":"phc_rcgDFyVZ3kkx4nU4DSbDnMozmz3t9evvRRKUipBbj7Wg","apiHost":"https://o.kyberis.ai","sessionRecording":true}},"contextual":{"options":["copy","view","chatgpt","claude","perplexity","mcp","cursor","vscode"],"display":"header"},"thumbnails":{"appearance":"dark","fonts":{"family":"Inter"}},"styling":{"latex":false},"navigation":{"global":{"anchors":[{"anchor":"API reference","icon":"book-open","href":"/api-reference/introduction"},{"anchor":"Support","icon":"life-buoy","href":"mailto:[email protected]"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"kyberis","hasAudioNarration":false,"actualSubdomain":"kyberis","customDomains":["developer.kyberis.ai"],"gitSource":{"type":"github","owner":"kyberis-ai","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"feedback":{"agentFeedback":true,"thumbs":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"}},"buildId":"6ac823d95a510f3e5a636984","clientVersion":"0.0.4143","searchFilterCounts":[{"language":"default","tag":"Guides","count":55},{"language":"default","tag":"API reference","count":28},{"language":"default","tag":"Platform integrations","count":16},{"language":"default","tag":"Install Kyberis","count":10},{"language":"default","tag":"Sample investigations","count":9},{"language":"default","tag":"Splunk","count":9},{"language":"default","tag":"Interpret responses","count":9},{"language":"default","tag":"Threat investigations","count":7},{"language":"default","tag":"Assessments","count":6},{"language":"default","tag":"Databricks","count":6}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"guides/batch-workflows","slug":"/guides/batch-workflows","pageMetadata":{"title":"Batch Investigation Workflows","description":"Use batch endpoints for bounded, per-item threat investigation at scale.","href":"/guides/batch-workflows"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Use batch endpoints for bounded, per-item threat investigation at scale.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={code:`code`,p:`p`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,..._provideComponents(),...props.components},{Heading,Table}=_components;if(!Heading)_missingMdxReference(`Heading`,true);if(!Table)_missingMdxReference(`Table`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`Batch endpoints help agents process multiple entities or claims while preserving per-item uncertainty.`}),`\n`,_jsx(Heading,{level:`2`,id:`available-batch-endpoints`,children:`Available Batch Endpoints`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Endpoint`}),_jsx(_components.th,{children:`Use`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`/v2/entity-resolution/batch`})}),_jsx(_components.td,{children:`Resolve multiple inputs`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`/v2/evidence/batch`})}),_jsx(_components.td,{children:`Retrieve evidence for multiple claims`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`/v2/relationships/batch`})}),_jsx(_components.td,{children:`Pivot relationships for multiple subjects`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`/v2/assessments/batch`})}),_jsx(_components.td,{children:`Run multiple deterministic assessments`})]})]})]}),`\n`,_jsx(Heading,{level:`2`,id:`limits-and-scopes`,children:`Limits and Scopes`}),`\n`,_jsxs(_components.p,{children:[`API schema caps are `,_jsx(_components.code,{children:`1..50`}),` items per batch. Plans or MCP clients may enforce smaller limits. Batch endpoints require the read scope and the matching `,_jsx(_components.code,{children:`batch:*`}),` scope.`]}),`\n`,_jsx(Heading,{level:`2`,id:`reporting-guidance`,children:`Reporting Guidance`}),`\n`,_jsx(_components.p,{children:`Return item-level status. Do not collapse ambiguous, failed, or low-confidence items into a single success summary.`})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Batch Investigation Workflows","description":"Use batch endpoints for bounded, per-item threat investigation at scale.","href":"/guides/batch-workflows"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Available Batch Endpoints","slug":"available-batch-endpoints","depth":2,"children":[]},{"title":"Limits and Scopes","slug":"limits-and-scopes","depth":2,"children":[]},{"title":"Reporting Guidance","slug":"reporting-guidance","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":[],"subdomain":"kyberis","siteName":"Developer Portal","title":"Batch Investigation Workflows - Developer Portal","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-07-04T00:40:25.671Z","originalFileLocation":"guides/batch-workflows.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"dark\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Use batch endpoints for bounded, per-item threat investigation at scale.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Developer Portal\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Batch Investigation Workflows - Developer Portal\">\u003cmeta data-mint-head property=\"og:description\" content=\"Use batch endpoints for bounded, per-item threat investigation at scale.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Developer Portal\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://developer.kyberis.ai/guides/batch-workflows\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://kyberis.mintlify.site/_mintlify/api/og/v2?division=Threat+investigations\u0026amp;title=Batch+Investigation+Workflows\u0026amp;description=Use+batch+endpoints+for+bounded%2C+per-item+threat+investigation+at+scale.\u0026amp;theme=d37ed0cfdbf22e798706ca24\u0026amp;signature=89d4526d9acdd88f6b03970f9d73051bb8be2c0d70fb5d91a269ff7cb10b87ff\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Batch Investigation Workflows - Developer Portal\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Use batch endpoints for bounded, per-item threat investigation at scale.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://kyberis.mintlify.site/_mintlify/api/og/v2?division=Threat+investigations\u0026amp;title=Batch+Investigation+Workflows\u0026amp;description=Use+batch+endpoints+for+bounded%2C+per-item+threat+investigation+at+scale.\u0026amp;theme=d37ed0cfdbf22e798706ca24\u0026amp;signature=89d4526d9acdd88f6b03970f9d73051bb8be2c0d70fb5d91a269ff7cb10b87ff\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/kyberis/st_-IePmyyluVGKF/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Developer Portal\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#34E0D4\">\u003clink data-mint-head rel=\"canonical\" href=\"https://developer.kyberis.ai/guides/batch-workflows\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/guides/batch-workflows.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://developer.kyberis.ai/#organization\",\"name\":\"Developer Portal\",\"url\":\"https://developer.kyberis.ai\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/kyberis/u7saXgSwhIjXsY7P/images/KYBERISLightBG(1).png?fit=max\u0026auto=format\u0026n=u7saXgSwhIjXsY7P\u0026q=85\u0026s=66da6f97e851defcb12af05b800a8a27\"}},{\"@type\":\"WebSite\",\"@id\":\"https://developer.kyberis.ai#website\",\"name\":\"Developer Portal\",\"url\":\"https://developer.kyberis.ai\",\"publisher\":{\"@id\":\"https://developer.kyberis.ai/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://developer.kyberis.ai/guides/batch-workflows#webpage\",\"url\":\"https://developer.kyberis.ai/guides/batch-workflows\",\"name\":\"Batch Investigation Workflows\",\"description\":\"Use batch endpoints for bounded, per-item threat investigation at scale.\",\"dateModified\":\"2026-07-04T00:40:25.671Z\",\"isPartOf\":{\"@id\":\"https://developer.kyberis.ai#website\"},\"breadcrumb\":{\"@id\":\"https://developer.kyberis.ai/guides/batch-workflows#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://developer.kyberis.ai/guides/batch-workflows#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Threat investigations\",\"item\":\"https://developer.kyberis.ai/guides/investigate-cve\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Batch Investigation Workflows\",\"item\":\"https://developer.kyberis.ai/guides/batch-workflows\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://developer.kyberis.ai/guides/batch-workflows#article\",\"headline\":\"Batch Investigation Workflows\",\"name\":\"Batch Investigation Workflows\",\"description\":\"Use batch endpoints for bounded, per-item threat investigation at scale.\",\"url\":\"https://developer.kyberis.ai/guides/batch-workflows\",\"mainEntityOfPage\":{\"@id\":\"https://developer.kyberis.ai/guides/batch-workflows#webpage\"},\"dateModified\":\"2026-07-04T00:40:25.671Z\",\"publisher\":{\"@id\":\"https://developer.kyberis.ai/#organization\"},\"isPartOf\":{\"@id\":\"https://developer.kyberis.ai#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Developer Portal\",\"publisher\":{\"@type\":\"Organization\",\"name\":\"Developer Portal\"},\"provider\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","agentPointerHref":"/guides/batch-workflows.md","siteName":"Developer Portal","nav":{"global":{"anchors":[{"anchor":"API reference","icon":"book-open","href":"/api-reference/introduction"},{"anchor":"Support","icon":"life-buoy","href":"mailto:[email protected]"}]},"tabs":[{"tab":"Guides","groups":[{"group":"Getting started","pages":[{"title":"Kyberis Developer Portal","href":""},{"title":"Why Kyberis","href":"/why-kyberis"},{"title":"Quickstart","href":"/quickstart"},{"title":"Authentication","href":"/development"}]},{"group":"Install Kyberis","pages":[{"title":"Set up Kyberis in your Agent","href":"/install/overview"},{"title":"Install Node.js and npx","href":"/install/node-npx"},{"title":"Install the Kyberis Skill","href":"/install/skills"},{"title":"Install the Kyberis MCP Server","href":"/install/mcp"},{"title":"Claude Code Setup","href":"/install/claude-code"},{"title":"Cursor Setup","href":"/install/cursor"},{"title":"Codex Desktop Setup","href":"/install/codex"},{"title":"Windsurf Setup","href":"/install/windsurf"},{"title":"Generic Agent Setup","href":"/install/other-agents"},{"title":"Troubleshoot Agent Setup","href":"/install/troubleshooting"}]},{"group":"Platform integrations","pages":[{"title":"Platform integrations","href":"/integrations/overview"},{"group":"Splunk","pages":[{"title":"Kyberis for Splunk","href":"/integrations/splunk/overview"},{"title":"Install the Splunk app","href":"/integrations/splunk/install"},{"title":"Splunk credential setup","href":"/integrations/splunk/credentials"},{"title":"Splunk permissions and roles","href":"/integrations/splunk/permissions"},{"title":"Splunk network requirements","href":"/integrations/splunk/network"},{"title":"Splunk data handling and privacy","href":"/integrations/splunk/privacy"},{"title":"The | kyberis command","href":"/integrations/splunk/search-command"},{"title":"Kyberis enrichment alert action","href":"/integrations/splunk/alert-action"},{"title":"Splunk troubleshooting","href":"/integrations/splunk/troubleshooting"}]},{"group":"Databricks","pages":[{"title":"Kyberis for Databricks","href":"/integrations/databricks/overview"},{"title":"Install Kyberis in Databricks","href":"/integrations/databricks/install"},{"title":"Databricks credential setup","href":"/integrations/databricks/credentials"},{"title":"Databricks permissions","href":"/integrations/databricks/permissions"},{"title":"Databricks network requirements","href":"/integrations/databricks/network"},{"title":"Databricks data handling and privacy","href":"/integrations/databricks/privacy"}]}]},{"group":"Threat investigations","pages":[{"title":"Investigate a CVE","href":"/guides/investigate-cve"},{"title":"Investigate an IOC","href":"/guides/investigate-ioc"},{"title":"Investigate a Threat Actor","href":"/guides/investigate-actor"},{"title":"Pivot with Relationships","href":"/guides/pivot-relationships"},{"title":"Recommend Hunt Pivots","href":"/guides/hunt-pivots"},{"title":"Prioritize Threats for an Environment","description":"Use deterministic ranking to decide which signals deserve attention first.","href":"/guides/prioritize-environment"},{"title":"Batch Investigation Workflows","href":"/guides/batch-workflows"}]},{"group":"Sample investigations","pages":[{"title":"Sample Investigations","description":"Demo-ready Kyberis examples for PLG investigations, MCP sessions, and direct REST workflows.","href":"/examples/overview"},{"title":"Sample Environment Prioritization","href":"/examples/environment-prioritization"},{"title":"Sample Environment Context Comparison","href":"/examples/environment-context-comparison"},{"title":"Sample CVE Investigation","href":"/examples/cve-investigation"},{"title":"Sample IOC Assessment","href":"/examples/ioc-assessment"},{"title":"Sample Actor Lookup","href":"/examples/actor-lookup"},{"title":"Sample Domain and Malware Pivot","href":"/examples/domain-malware-pivot"},{"title":"Sample MCP Sessions","href":"/examples/mcp-session-examples"},{"title":"REST Script Examples","href":"/examples/rest-scripts"}]},{"group":"Interpret responses","pages":[{"title":"Response Model","href":"/responses/overview"},{"title":"Resolution Responses","href":"/responses/resolution"},{"title":"Evidence Responses","href":"/responses/evidence"},{"title":"Relationship Responses","href":"/responses/relationships"},{"title":"Prioritize Responses","href":"/responses/prioritize"},{"title":"Hunt Pivot Responses","href":"/responses/hunt-pivots"},{"title":"Assessment Responses","href":"/responses/assessments"},{"title":"Batch Responses","href":"/responses/batches"},{"title":"Error Responses","href":"/responses/errors"}]}]},{"tab":"API reference","pages":[{"title":"API reference","href":"/api-reference/introduction"}]},{"tab":"Changelog","pages":[{"title":"Changelog","href":"/changelog"}]}]},"basePath":"","title":"Batch Investigation Workflows - Developer Portal","buildId":"dpl_Fyv1NbzwP68g2bEH2Roy98uY1zmE","deploymentId":"dpl_Fyv1NbzwP68g2bEH2Roy98uY1zmE","dynamics":[],"chunks":[]}