SC-200 - Manage incident response - Perform live response and collect investigation packages