The SOC console: one place for cases, live investigations, containment and platform health.
Every platform operator action on every tenant, with the value before and after.