How can you add historical data to an incident?

Attaching a report to an incident allows for the incorporation of historical data in a structured and comprehensive manner. Reports can contain a wealth of information gathered over time, including logs, alerts, and other relevant data, which helps provide context to the incident. By linking the incident to a report, an analyst gains access to a more profound understanding of the scenario, enabling better decision-making and incident analysis. This method is not only efficient but also enhances the analytical depth of the incident response, as it consolidates past insights with current findings.

In contrast, while modifying incident details manually could allow for the addition of some historical context, it doesn’t provide a systematic or structured way to incorporate extensive data. Using the incident creation form is limited to initial data entry, and linking to external data sources may not be applicable in all situations or could introduce complexities without guaranteeing relevant data is connected effectively.