When an incident is created, its AI coordinator uses knowledge of the affected applications and their response rules to decide what to do next. It starts or coordinates investigations as needed. The coordinator tracks the incident as a whole, while investigation tasks examine specific problems. Responders can see what is being investigated without assigning every step themselves.
As new alerts, comments, and investigation results arrive, the coordinator passes relevant updates to ongoing investigations and prompts a fresh check when evidence changes an earlier assessment. It also keeps key findings, progress, and the incident report current, giving teammates a shared record for handoffs and reviews.