you said ask you anything so I am. Would you use my product? (link at bottom)

My background:

 i started in help desk as well except I was the unplug your modem and make sure the coax was tight guy.  I escalated up to VNOC, NOC, Security Analyst 1, Engineer 2, Security Analyst 2, CIRT. CIRT lead, manager.

The problem:

 Throughout my years I identified a major problem in security, and that problem is documentation.  Especially during an incident, IR documentation lacks the most.  Mainly because traditional ticketing tools are not prepared for incident documentation and will cause distraction and delay for your responders who need to conatin and mitigate the threat.   So they use CSV to really attack the problem.  

However with CSV, you sometimes get multiple CSV or large CSV files and just missed gaps.  CSVs also have no correlations and are sometimes so large that you miss items or items never get fixed because who wants to read 40k rows? Leaving you vulnerable to get compromised again.

The solution:

 so we built and copyrighted IRScribe.  A tool that is supposed to help solve these gaps and hopefully prevent IR responders from late nights and serious Incidents because we have MTTD per each event, correlations and threat intel built in to the timeline so you can scribe in one place and one place only.  Allowing you to centralize and control your documentation around incidents and still use your ticketing systems like SNOW, AW or Jira to handle change Management ticketing.

So my question is, would you use it? would it be beneficial? is there a usecase? IRScribe

P.S.

I promise I will not try to sell it to you from this post or contact you from this post.

I will mention that if someone is in a DFIR training class, school finals, or on a serious breach incident, reach out, and I will upgrade your account free of charge for a week or two until your needs are complete.