Forms
Incident Intake
Incident intake is how users, operators, and automated systems submit a suspicious event into a response workflow. Good intake reduces ambiguity and accelerates investigation quality.
Last updated: April 15, 2026
Minimum intake context
Useful intake includes the affected device, observed behavior, time window, local user context, and any visible application or file path involved in the event.
How intake becomes triage
Once an incident is accepted, vedSecure links intake context to device telemetry and existing detections so analysts can confirm whether they are seeing a new case or a duplicate of an already known incident.