The incident War Room is a collection of the Active Response investigation actions, artifacts, and collaboration pieces for an alert or incident. It is a chronological journal of the incident investigation. You can run commands and the playbook from the War Room and filter the entries for easier viewing.