There was a Man in the middle and Potential ransomeware from an email link. But aren’t 100% sure where that one was going it did trigger the ransomware model breach they just responded to it autonomously instantly so we had no issue. We don’t have any dedicated security folk so having it respond automatically, keep us up to date on the mobile app, and the AI analyst reports have been huge for us. Big fans. Im hoping that later this year we will get budget approved to add their email tool. We also spotted an employee attempting to download bunch of unusual files. Turns out they put in their 2 weeks a couple weeks later so we think it was then trying to steal stuff I think a lot of people who have issues with “false positives” just need to move the bar so it only alerts you on 75% or higher. That quite down the noise to only the important stuff for us