Send suspicious post-offboarding pageview alerts to on-call before next workday

Your offboarded accounts still trigger page views, creating security gaps and delayed containment. On-call technicians get alerts and a log entry so incidents are reviewed before the next workday.