Check threat indicators, inspect emails, flag exposed files. Every one is ready to run, and you can adjust it in plain language.
Get an editable security incident report that separates known facts from provisional findings and links back to your incident ticket.
Get a staff incident report draft in a shared document, with witness accounts kept separate and questions ready for the site lead.