During an incident, key facts are pulled from transcripts automatically — locations, threats, casualties. Afterwards, replay the whole thing synchronised across transcript, audio and events.
As an incident unfolds, whoot. reads the transcripts in real time and pulls out the facts that matter — locations, threat actors, weapons, casualties, hazards, requests for help and all-clear signals. Instead of scrubbing back through everything that was said, an operator sees the key entities surface on their own, as they're mentioned.
The Security Operations Dashboard keeps the live picture in one place: active incidents, alerts by severity, who's present and reachable, how fast alerts are being acknowledged, a read on stress levels from the room audio, and a running feed of recent events.
When you need to understand exactly what happened, Incident Replay plays the incident back with everything lined up on one timeline — the transcript, each room's audio, who was present when, and every event (steps completed, broadcasts sent, status changes). Scrub to any moment and see, hear and read what was going on together.
Every incident, resolved or escalated, is kept in History — searchable and filterable, each one opening into a full dossier: the capture, who took part, the key entities, and the complete timeline.