SOC Functionality · Today
Command Dashboard
Threat Posture
7.2/100
↑ 0.4 vs 24h · 1,284 activity
Elevated
OPEN ALERTS
1,284+12% vs 24h
CRITICAL
37−4 vs 24h
INCIDENTS
8stable
SLA
98.4%on target
Alert volume · 24 hours
peak 55
24h ago12h agonow
Top firing rules · 24h
T1039.001 PowerShell
T1078 Valid Accounts
T1011 C2 Communication
T1003 Credential Access
T1053 Scheduled Task
MITRE ATT&CK heatmap · coverage · activity
RECON
RESRC
INIT
T1190
T1566
EXEC
T1059
T1059.0
T1047
T1053
PERSIST
T1547
T1078
T1136
PRIVES
T1068
T1078
EVADE
T1027
T1036
T1055
CRED
T1003
T1110
T1555
DISCOV
T1083
T1082
LATERAL
T1021
T1210
COLLECT
T1039
T1074
CC
T1071
T1011
T1095
DATA
T1041
IMPACT
T1486
T1490
Feed health
Splunk
2,487/hr
live
Sentinel
3,988/hr
live
CrowdStrike
6,320/hr
live
Defender
1,385/hr
live
Palo Alto NGFW
892/hr
live
Elastic SEM
1,104/hr
live
Threat Intelligence