Include complete incident information with the thread detection email alerts. This will make it easy to share the information with others who do not have access to Box Shield admin portal, and will also eliminate an extra step of logging into admin portal for those receiving and triaging the alerts.
Use case: infosec team receives a Box Shield malicious content alert, identifies it as needing action, and passes it to the endpoint management team for mitigation.