Orion Incident Response Live CD
6.2. Initial Incident Entry
After the startup, the handler enters the details of the new incident. This information can either be collected using the Initial Incident Questionnaire (recommended), or entered directly into ITIR – the Incident Tracker for Incident Response tool.
After incident information is entered, Orion will recommend a team size and prompt for team member contact information. The questionnaire captures this information and saves it for use in various other tools.
Figure 6: Incident Questionnaire