Check threat indicators, inspect emails, flag exposed files. Every one is ready to run, and you can adjust it in plain language.
Review a draft for each material incident from the shift.
You get a dated queue of daily incident report drafts. Each material incident has its own report for you to review.
Build a reviewable timeline and provisional cause on the incident ticket.
Your incident lead gets a report draft on the ticket, with a clear timeline and stated customer impact.