A key component of shortening containment time – the time between the detection and mitigation of breach – is the ability to automate critical components of the security process workflow.  Though this can involve a variety of tools, an important element of documenting and expediting response is the ability to automatically generate help desk tickets within the installed ticketing system.