LIVE FEEDS ACTIVE — SIEM CONNECTED — FIREWALL OK — IDS/IPS ONLINE — ENDPOINT AGENTS: 847 ACTIVE — LAST THREAT INTEL UPDATE: 00:04 AGO — CVE-2024-3400 ACTIVE IN WILD — PSIRT ADVISORY PENDING REVIEW — APT29 CAMPAIGN DETECTED EUROPE REGION — TLP:AMBER
ALERT QUEUE
INVESTIGATION WORKBENCH
NO ALERT SELECTED
Overview
Event Log
Packets
WHOIS
Threat Intel
Incident

SELECT AN ALERT FROM THE QUEUE

Click an alert on the left to begin investigation.
Analyze the evidence, use your tools,
then submit a verdict.

ACTIVITY LOG
THREAT INTEL FEED
Shift Complete — Performance Report
SOC Analyst Debrief
CyberWatch SOC — Tier 1 Simulation