Incident Management

Sources: define/organize alert sources
Alerts: triage queue
Cases: investigation lifecycle
Case Templates: reusable investigation playbooks (admin / analyst) — see <a href="/cryptotaxi247/CoPilot/blob/main/docs/user/ui/incident-case-templates.md" rel="nofollow noopener noreferrer">Case templates

Menu: Incident Management

Best for: SOC operators / analysts

Incident Management is where analysts spend most of their time.