diff --git a/compute/admin_guide/runtime_defense/incident_explorer.adoc b/compute/admin_guide/runtime_defense/incident_explorer.adoc
index 80ee1c121..d8c539226 100644
--- a/compute/admin_guide/runtime_defense/incident_explorer.adoc
+++ b/compute/admin_guide/runtime_defense/incident_explorer.adoc
@@ -181,6 +181,8 @@ To retrieve and review the forensic data for a container:
 . Open Console, and go to *Monitor > Runtime > Container Models*.
 
 . In the table, click the microscope icon for the container of interest.
+
+NOTE: Use the header *Authorization: Bearer <token>* in the API URL link to retrieve the results.
 +
 image::incident_explorer_container_forensics.png[width=800]
 +