Coming off of a full 24 hour incident response and clicking this has me wondering about my choices.