Incident information retrieval for automatic filling

When a crisis is triggered, allow SARA to retrieve important fields (user account/IP address/machine name/etc.) from the crisis description and pre-fill the steps related to these fields to have a precise description of the action to be performed.

Example:

• "disconnect machine 192.168.50.2 from the network"

• "deactivate the account of alan.turing@createur.com , terminate the user's current sessions and reset their password"

Alternative option: rather than using the description, offer a form with standardized fields to be reused.