Proofpoint Workflows

Hello guys, we recently went live with PP…it’s doing a marvelous job so far but it’s a new tool and me as a email security analyst I’m still learning. My company wants me to create a workflow that would close incidents that trigger manual review by our tier1 analysts. Currently our manual review incidents or messages are triaged by our tier1 analysts 1 analysts but after they investigate and reclassify the incident or messages, there is no response back to the user who reported it and also the incident stays in the portal but doesn’t close automatically. Is there a workflow around this? Please share