Create incident blocklist items for IT analysts before morning standup

Your virus scan files land in a shared folder, causing delayed threat review and missed blocklist updates. Security analysts receive structured blocklist records and a team chat alert so reviews finish before the next workday.