Beyond simple triage, I get the sense most incident resolution is still manual. Environments are fragmented with different tools for SaaS, cloud, endpoints, identity, … In the end, only the ITops humans can piece together what's actually happening in an incident.
Curious how others see it.
