NightWatch NIGHTWATCH SOC
checking sign-in…

SOC overviewThe whole SOC on one screen, live: what needs you now, the pipeline from the sources to delivery, the key figures for intake, agents and response, and what the agents did in the last hour. Every card and tile opens its detail and links to the page that holds it; in the detail every bar, segment, row and number opens the list of what it counts, with the same count. Evaluation runs are excluded everywhere.

What needs you, how the pipeline is flowing, and what the agents did.

Connecting…Pipeline and agent activity refresh every 5 s, key figures every 20 s, the queue counts every 60 s. Evaluation runs are left out everywhere.

Needs you now

Loading…

Pipeline

sources to delivery · hover for the reason, click for detail

Key figures

7 days unless marked · a number opens its list, a title its detail

Loading…

Loading…

Agent activity last 60 min Completed investigations with a verdict other than benign, failed runs and worker faults in the last 60 minutes, newest first; the benign verdicts are summed on one line. Evaluation runs are left out.

All runs
  1. Loading…
SOCIncidentsRespondHealth