18 waiting across 12 of 40 tenants in your scope
above latitude here 9 signals 27m High Norsk Marine Ransomware precursor on FS-02 Real, contain endpoint
above latitude here 14 signals 52m Medium Aubrey Dental Group Sign in from an unseen device Real, contain identity
above latitude here 9 signals 6m Medium Halden Freight Impossible travel, two offices Benign, sanctioned VPN rollout 6 signals 4m Low Halcyon Care Beaconing to a new domain Real, contained 5 signals acted 2h Low Bramber Retail Mass mailbox rule creation Benign, new admin onboarding 3 signals 41m
7 of 18 shown, one selected ↑ ↓ read, the pane follows Enter decides, focus moves into the pane order: unrecorded, waiting on you, severity, age
Escalate C-4417
C-4417 · Larkfield Logistics · Clerk filed real, contain identity against a snapshot that is gone
Who this goes to
The handover
Three prompts, all optional. No taxonomy and no severity picker: a rejection routes to a machine so it must be machine readable, and this routes to a person who will read it. Structure here serves comprehension, and it is what stops the quality of a handover depending on how tired its author was.
One prompt here, not three. Three empty fields at 03:00 produce a handover that looks complete and is not. The handover is thinner from a phone, and that is honest rather than ideal.