Trigger Pop up message on Security Incident Closure in SIR Workspace

[VarunS]

There is a pop-up message as shown in the attached screenshot that is triggered when the state of the security incident is changed to closed in the Security Incident Response Workspace. I need to modify the trigger condition for this message. However, I am unable to find the client script that is triggering this message. Can someone please help identify the trigger for this message.

[GregF2]

Did you ever figure this out?  I am trying to figure out where it is also.  I am having trouble to get it to pop the message when they close incident via custom button.  It used to work until a couple plugin versions ago.  I would like to know where it is so I can try to figure out what is going on.