excalidraw https://excalidraw.com/#room=0f0314201e6671c1f4e2,BufNrgkHtAgDG0WXg2FVDw February 9, 2026 Improvement AI Insight: Set chat and canvas to populate azure KQL response Possible to make the gadget or insight based on response Corrections/Update: SLA SLA resolution time (di Incident Details, SLA Resolution Time nya static. Update SLA Resolution/Remaining based on current (update) Priority. Workload distribution ticket Set to 5:1 untuk ticket distribution Benerin Auto Closed Incident-Open. diremove auto closed nya. Raw_Log untuk True Positive di save. sisanya discard, tapi simpan KQL nya. Add Opsi Remediation Action “Free Text” yang hanya bisa di create oleh L2. Low priority for FP and Update in Report Last Week Backlog brought to this week. SOP L1 - Document Guideline Remove tag for Alert name Threat category berubah jadi threat state Munculin semua yg ada d tags (add filter) Low Priority Role analyst: L1, L2, Admin Analyst Creation: Create Analyst to Azure Users Non-mailbox Login Re-Open Ticket. (Create Playbook/Automation change from Closed to Active Trigger reassign analyst) Incident Grouping (Re-Open and Re-Assigned Analyst saat ownernya unavailable)