Create suspicious activity records for security coordinators before review

Your parsed incident emails land in a shared inbox, causing missed security reviews and unclear audit trails. Coordinators gain a structured action log to prioritize investigations before the next review cycle.