Based on this analysis, the platform can automatically https://uofa.ru/en/formy-offline-problemnye-seti-v-politike-magomedov-k-m-potencial/ quarantine the email from user inboxes, delete duplicates enterprise-wide, and create a case for analyst review if needed. It then automatically quarantines the email across all user inboxes, notifies the security team, and escalates the incident for further investigation. Many SOAR platforms now include built-in threat