A record of what actions have been taken during the lifetime of an incident to resolve the incident. Examples include comments by the analyst, communications from the user, attachments, task outputs, and so forth.