THE SEQUENCE, WITH ITS SOURCES
Impact → detectionFirst signal, explicitly selected
Detection → mitigationReviewed response interval
Impact → resolutionComputed from supplied timestamps
01 / EVENT REPLAY
Follow what happened.
ACTUAL EVENT SPACING / UTC
No matching events. Change filters to return to the timeline.
02 / THE CURRENT EXPLANATION
A cause statement,
with its status.
A sequence can show when things happened. It cannot establish why by itself.
03 / OWN THE NEXT STEP
Turn the review into action.
04 / PORTABLE HANDOFF
Take the evidence with you.
The matching review, normalized records and owned actions are actual files. The complete delivery preserves source documents and their hashes.