curl --request GET \
  --url https://api.devhelm.io/api/v1/forensics/incidents/{id}/timeline \
  --header 'Authorization: Bearer <token>'

{
  "data": {
    "transitions": [
      {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "occurredAt": "2023-11-07T05:31:56Z",
        "monitorId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "fromStatus": "<string>",
        "toStatus": "<string>",
        "reason": "<string>",
        "triggeringEvaluationIds": [
          "3c90c3cc-0d44-4b50-8888-8dd25736052a"
        ],
        "affectedRegions": [
          "<string>"
        ],
        "policySnapshotHashHex": "<string>",
        "engineVersion": "<string>",
        "checkId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "details": {},
        "incidentId": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
      }
    ],
    "triggeringEvaluations": [
      {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "occurredAt": "2023-11-07T05:31:56Z",
        "monitorId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "region": "<string>",
        "policySnapshotHashHex": "<string>",
        "ruleIndex": 123,
        "ruleType": "<string>",
        "ruleScope": "<string>",
        "inputResultIds": [
          "3c90c3cc-0d44-4b50-8888-8dd25736052a"
        ],
        "outputMatched": true,
        "evaluationDetails": {},
        "engineVersion": "<string>",
        "checkId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "triggeringTransitionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
      }
    ],
    "policySnapshot": {
      "hashHex": "<string>",
      "policy": {},
      "engineVersion": "<string>",
      "firstSeenAt": "2023-11-07T05:31:56Z",
      "lastSeenAt": "2023-11-07T05:31:56Z"
    }
  }
}