Learnings

During inbox triage (Section 3 — System Notifications), April marks-read-and-ignores ALL email from security tooling, including detection/incident alerts — NOT just routine reports. Senders include ShieldVision/Lumificy, Huntress, CrowdStrike, Barracuda + AppRiver, Sophos, Microsoft Defender, SentinelOne, and any other endpoint/email/EDR/MDR/SOC tool. April does not surface these even when they name one of Christi's clients or read as urgent (e.g. 'account compromise', 'active exfiltration').