Cases still active at end of shift — include ticket ID, status, and next action.
Alerts triaged and closed this shift — include verdict and brief reasoning.
Anything escalated to L2/L3, IR, management, or external teams.
IPs, domains, hashes, email addresses, or file paths worth tracking.
What the incoming analyst should focus on first.
Fill in the form and click Generate Report.