Create suspicious login records for security triage

Your login alerts lack account and user context, leaving security and support teams unable to prioritize suspicious access for contractors and active projects. Capture each suspicious login as a CRM incident so program coordinators and IT can triage and act same day.