add Incident Timestamp explanation 

address #37