Live SOC dashboard
Everything below is derived from the range's public rooms by the same correlation and SOAR engines the labs run — no separate demo data. It refreshes every 30 seconds. Open SOC command to see the same detections next to equipment health and your open cases.
Live alerts
Correlated from the estate activity ledger of public rooms.
Reading the estate…
SOAR queue
What the automation layer would do about each alert, and what it must ask a human for.
Nothing queued — no live alerts to respond to.
Threat intel feed
Real indicators pulled from the intel provider, marked when they show up in a live alert.
The intel feed has not delivered indicators yet.
Your query score
Every search you settle in a SIEM console is graded against the rulebook.
Sign in and run a search in any SIEM console — your graded queries show up here. Sign in
Your graded SOAR cases
Live rubric standing for every response case you have open on the range.
No graded cases yet — open one from the SOAR case walkthrough and its rubric score appears here as you run it.
Instructor feedback
Grades and coaching your instructor left on your runs — no instructor console needed.
Nothing graded yet. Once an instructor reviews one of your cases, their score and notes appear here.