forensic to improve incident response

Our forensic team is challenged by incident operation team, they raised the concern

forensic give clear explanation of attack and good root cause analysis and collect evidence, but no improvement of overall incident response process, previously incident response team block malicious IOC even without forensic analysis, monthly breach ticket around 15000 per month, after forensic come into picture, they encounter 10% more tickets and no reduction of tickets

and incident response time increase 20% and the whole process (from ticket open to close) is slowing down

I'm thinking the forensic contribution regarding the incident response, anyone has the similar experience, thanks