Send manufacturing ransomware alerts to security team before escalation

Your ransomware incident feed about manufacturing targets arrives noisy and untriaged, causing missed escalations and delayed containment. Analysts get concise alerts and a logged incident summary so containment happens before the next security standup.