Features
Features that keep the record connected
IncidentForge features for structured evidence, traceable review and deterministic incident reporting.
Evidence and analysis
Use one controlled incident workspace with an Evidence Registry, Timeline and IOC handling. Connect evidence to findings and recommendations so the reasoning remains reviewable.
- Evidence Registry and supported import boundaries
- Timeline and IOC records
- MITRE ATT&CK mapping and structured recommendations
Review and delivery
Analyst, Reviewer and Approver workflow makes handoff and final status explicit. ReportSnapshot produces JSON, HTML, DOCX and PDF outputs from the same deterministic record.
- Traceability from evidence to findings
- Controlled review and approval
- Archive, restore, retention, Legal Hold and governed purge