What do you like best about the product?

It is difficult to view each incident that is created, sure searching for similar messages is extremely helpful but I've found that creating automated workflows is extremely helpful in this process. A few months ago we started receiving a lot of campaigns with falsified MFA requests, notices about email's expiring that required users to re-register etc. Having the amount of hits broken down per workflow allowed us to identify how to better educate our users in preventative training rather than reactionary training to a potential incident.

What do you dislike about the product?

I would say the tagging when remediating an incident, there isn't a previous tag list that I can quickly utilize. I've resorted to logging various tags I use in a OneNote and manually copy pasting into this field.

What problems is the product solving and how is that benefiting you?

Capturing suspicious emails from users, especially the similar messages feature, that is extremely helpful when resolving large campaigns.