Investigate a security incident and draft the response timeline
Use Security Copilot to support an incident investigation and produce a structured, defensible response timeline as the investigation unfolds.
An outage just got resolved and the postmortem is due tomorrow.
Reconstruct the timeline and calculate total downtime.
Prompt idea:
Here is a raw incident log with timestamps. Build a clean timeline of what happened, calculate total downtime from alert to resolution, and draft a 3-sentence summary for the postmortem.
How many minutes elapsed between the alert firing and the incident being declared resolved?
The alert fired at 14:02; the incident was declared resolved at 14:40.
The solution files contain the completed challenge. Review the approach to see if you missed any edge cases.
Use Security Copilot to support an incident investigation and produce a structured, defensible response timeline as the investigation unfolds.
Speed up and standardize service disruption messaging so end users hear about an outage quickly and consistently.
Get practical help with AI consulting or ask about training courses for your team.