A DLP administrator at Contoso is reviewing alerts in the Microsoft Purview portal. A single alert shows that a user triggered a policy 47 times over two hours by attempting to email spreadsheets containing credit card numbers to an external domain. The administrator needs to formally begin working the alert and prevent other reviewers from duplicating effort, while keeping a record that the alert is being handled. Which action should the administrator take on the alert?