incident-investigator

What problem does it solve?

Systematically investigate IcM incidents and customer-reported authentication issues for Android Broker/MSAL, providing evidence-based diagnosis and structured recommendations.

Core Features & Use Cases

• Context gathering: Collects affected apps, user accounts, devices, symptoms, and repro steps from IcM or logs.
• Evidence-driven analysis: Extracts and correlates logs (eSTS, broker) to form a timeline and hypotheses.
• Guided remediation: Outputs actionable recommendations and verification steps for remediation and follow-up.
• Use Case: Given an IcM ticket about an authentication failure, compile context, identify likely root causes, and propose validation steps.

Quick Start

Begin the investigation by gathering IcM context and relevant logs to establish the incident scope.