Incident(IncidentID, Severity, CreatedAt)

Analyst(AnalystID, FullName)

IncidentAnalyst(IncidentID, AnalystID, Role, HoursSpent, AssignedAt, PK(IncidentID, AnalystID))

Asset(AssetID, Hostname)

IncidentAsset(IncidentID, AssetID, PK(IncidentID, AssetID))

ResponseAction(ActionID, IncidentID, ActionType, ExecutedAt, Result)

Incident(IncidentID, Severity, CreatedAt, AnalystID, Role, HoursSpent, AssignedAt)

Analyst(AnalystID, FullName)

Asset(AssetID, Hostname)

IncidentAsset(IncidentID, AssetID)

ResponseAction(ActionID, IncidentID, ActionType, ExecutedAt, Result)

Incident(IncidentID, Severity, CreatedAt)

Analyst(AnalystID, FullName)

IncidentAnalyst(IncidentID, AnalystID, Role, HoursSpent, AssignedAt, PK(IncidentID), UNIQUE(AnalystID))

Asset(AssetID, Hostname)

IncidentAsset(IncidentID, AssetID)

ResponseAction(ActionID, IncidentID, ActionType, ExecutedAt, Result)

Analyst(AnalystID, FullName, Role, HoursSpent, AssignedAt)

Incident(IncidentID, Severity, CreatedAt, AnalystID)

Asset(AssetID, Hostname)

IncidentAsset(IncidentID, AssetID)

ResponseAction(ActionID, IncidentID, ActionType, ExecutedAt, Result)