From signal to response

The life of an alert in a security operations centre: collect, detect, triage, investigate, contain and learn.

Drag to move, scroll or pinch to zoom, click a node to open it.

0 of 23 places explored

Missions

Pick a guided trail. The map points at your next stop.

Triage an alert
From severity and context to the runbook and a safe containment step.
0/4
Build a detection
From the data you collect to a tested, tuned rule.
0/5