Create triage work item from labeled security emails

Your SOC inbox buries labeled security reports and alerts, delaying investigation handoff and SLA response. It creates tracked work items and notifies on-call analysts so cases are triaged same day.