Incidents

What it does: a work log of incidents with timestamped notes, severity, and export to Markdown OR a print-friendly page (Print / PDF) — your record of what you did and found. A saved Deputy investigation lands here too.

The Case: click "Make active" on an incident to make it the active case, and click "Active case ✓" again to end it. It shows as a ⚑ chip at the top right of the window (click it to come back here) and stays active across restarts; deleting the incident also ends it. Results appended to the case have secrets and device credentials masked first. (Planned work — provisioning, change windows — belongs in a Project instead.)

Safe to run: yes.

Reading results: use it to build the story for a ticket or handoff. Export gives Markdown; Print / PDF opens a clean page you save as PDF from your browser (Print → Save as PDF) — good for release or audit evidence.