Create incident record and notify ops channel for breaches

Your incoming breach notifications arrive as raw payloads without a tracked incident, delaying triage and evidence capture for on-call engineers. Capture parsed details into a tracked incident and ping your ops channel so triage starts same day.