Would love a way to mark an alert as "In Progress". I might have blocked all sign ins and rotated credentials, but still waiting to hear back from the affected user to make sure their password/mfa is reset.