→ Detect and respond to email threats faster by automating incident creation and message fetch to correlate malicious emails with incidents in Cloud Threat Response → Streamline incident triage by listing and running manual workflows that enrich incident data and track workflow execution status automatically → Maintain comprehensive security audit trails by uploading relevant messages to incidents and downloading message MIME bodies for forensic analysis