There also are "employee misconduct investigations." Sometimes conducted internally but also by a third-party, they can kick in when there is a suspicion of:
Changes at the FCRA recently makes it clear that employers do not have to get permission to conduct a misconduct investigation.