Incident response relies heavily on team-produced documentation. Sometimes it only exists because the person who knew everything wasn't available that day, and it didn't go well. Details depend on local practices, and may contain confidential information.