def METHOD_NAME(filter):
    incident_id = DemistoClientMock.INCIDENT_QUERY_PATTERN.findall(
        filter.filter.query
    )[0]
    return MagicMock(
        total=1, data=[MagicMock(id=incident_id, investigation_id=incident_id)]
    )
    pass