Each reported message is analyzed by Cloudstar’s incident response team. Engineers investigate, triage, and remove related threats from user inboxes. High-risk users may be flagged for further review or assigned additional security awareness training.