Pro tip: if you want to keep your incident responder happy, don't save up and submit all your incident reports 30 minutes before scheduled shift end. This makes IR cranky. #incidentresponse #infosec