DFIR triage workflow notes

Concise triage notes that align investigation quality with response speed and documentation discipline.