Morning! Just noticed that the tags [investigation] (15 questions) and [incident-analysis] (10 questions) seem to be quite similar. Are they about the same thing? And in that case, should one be a synonym of the other?
There is no excerpt for [incident-analysis], the one for [investigation] says "The process of gathering evidence and information that allows for the creation of a theory of events explaining a security incident."