The most underinvested part of incident response is triage. You've been woken up at 4 in the morning. You're nervous. You don't know what you're looking at. This is not the moment to rely on heroics or click seven dashboards deep. Invest in simple, clear triage tooling to figure out what is even broken. Also, be very careful if you're using AI for triage. AI is unusually confident in its assertions. During an incident, you need humans surfacing suspicion, not a model declaring an outcome.…