Chain Of Custody

incident-response helps teams triage declared security events with classification, SEV1-SEV4 severity, false-positive checks, escalation routing, forensic evidence collection, and regulatory deadline awareness. Includes a Python triage script and NIST SP 800-61-style workflow guidance.