SECOPS: Handling Incident Events and Evidence