Triage security alert emails for urgency, severity, likely cause, and evidence collection steps without storing message bodies.