Every few hours the scenario checks the server's processes and connections, an assistant assesses the risk and, if it's dangerous, alerts Microsoft Teams.