In this example, securedirector.oi.usa@gmail.com send emails as Vaneeta. Abnormal caught it but not Mimecast.
Blocked securedirector.oi.usa@gmail.com in Mimecast (https://mayfieldhelp.freshdesk.com/support/solutions/articles/44001927659-mimecast-block-senders) it only alerted impersonation but didn't take any action.
Checked Threat Log in Abnormal and found it auto remediated.
