On an alert about suspicious activity, the scenario runs an antivirus scan on the machine itself and sends the result to the responsible people.