Answer
Use approved internal or trusted reporting channels, remove unnecessary sensitive details, and share evidence only with people or organisations that need it for the investigation.
Explanation
An incident response should not create a second disclosure of credentials, infrastructure details, or investigative evidence.