18 waiting across 12 of 40 tenants in your scope
above latitude here 9 signals 27m High Norsk Marine Ransomware precursor on FS-02 Real, contain endpoint
above latitude here 14 signals 52m Medium Aubrey Dental Group Sign in from an unseen device Real, contain identity
above latitude here 9 signals 6m Medium Halden Freight Impossible travel, two offices Benign, sanctioned VPN rollout 6 signals 4m Low Halcyon Care Beaconing to a new domain Real, contained 5 signals acted 2h Low Bramber Retail Mass mailbox rule creation Benign, new admin onboarding 3 signals 41m
7 of 18 shown, one selected ↑ ↓ read, the pane follows Enter decides, focus moves into the pane order: unrecorded, waiting on you, severity, age
Escalate C-4417
C-4417 · Larkfield Logistics · Clerk filed real, contain identity against a snapshot that is gone
Who this goes to
Paged through the provider’s on call tool. Harrier reads the rota, it does not own it, and it records that this was sent rather than delivering it.
The handover
Three prompts, all optional. No taxonomy and no severity picker: a rejection routes to a machine so it must be machine readable, and this routes to a person who will read it. Structure here serves comprehension, and it is what stops the quality of a handover depending on how tired its author was.
One prompt here, not three. Three empty fields at 03:00 produce a handover that looks complete and is not. The handover is thinner from a phone, and that is honest rather than ideal.