investigating
contained
resolved
post_incident_review
