Its also anything produced by a artistic production process e.g. in software- aka build-artifacts or documentation.
As with all industries that are "birthed" by a mother-field software-security has overloaded the term inherited from its birth place industry.
In this case, its the product produced by the investigation.