Open a workspace from an incident, pin the evidence, and work it with the assistant.
Open a workspace from an alert, a fail-closed event, a quorum loss, a manual action, or a suspension. The workspace pre-populates with the relevant evidence.
No workspaces yet
You have not opened an incident workspace. Open one above to pin evidence and work it with the assistant.