Alert enrichment, playbook selection, ticket creation, notification workflows, and SIEM/SOAR forwarding — automated end to end from a single incident creation call.
—
Total Incidents
—
Currently Open
—
MTTR (minutes)
—
Open Critical/High
Open New Incident
Automatically runs enrichment, selects a response playbook, opens an internal ticket, sends a notification, and forwards to SIEM/SOAR (CEF over syslog) — see incident/manager.py.