Incident Response: What tool workflow do you use to collaborate on and document IR?

I haven't done any (real) IR myself, but I was thinking something like [TheHive Project](https://thehive-project.org/) (open source) or similar proprietary IR toolsets would be common. But over on r/blueteamsec I just saw [this post](https://www.reddit.com/r/blueteamsec/comments/vzx1ed/live_investigation/), where people claimed to be using:

* JIRA
* Teams
* OneNote

I was a bit appalled as I tried to imagine how an IR process would work smoothly with this workflow. I've done IR in training, and our use of Google Docs did not get …

cybersecurity document incident incident response ir response tool