In reply to Gabe.

Hi Gabe,
Just to clarify before I answer, did you mean Incident Response when you mentioned 'IR'?