A post-mortem is a document that allows you to better understand the origins and causes of an incident and ultimately learn from your response to it.
Each incident post-mortem should include key metrics such as start and resolution time, the incident response team and more. The end of the document should be focused on understanding what vulnerabilities allowed the incident to happen in the first place and how to best avoid similar incidents in the future.