Incidents

Incident = agrégat manuel ou automatique de Detections corrélées. Workflow IR : open → investigating → contained → resol