v3.0.0

What's New

• Renamed "Emergency Response" → "Compromised Account" workflow
• Excel mail flow reports — replaces console message trace with two Excel files (sent-by, sent-to) covering the last 10 days
• Sign-in log Excel report — new sub-menu option fetching last 7 days of sign-in activity via Graph REST API
• Admin role check — warns if the compromised user holds admin roles so responders know to review tenant-wide changes
• Delegation removal — audit mailbox permissions now offers a multiselect to remove FullAccess, SendAs, and SendOnBehalf
• Human-readable ticket notes — replaced checkbox format with natural language prose, only includes actions actually taken
• Password delivery tracking — ticket notes correctly reflect whether credentials were shared via one-time secret link or raw password fallback