SOC Overview
Loading dashboard…
Live attacker IPs from the SANS Internet Storm Center honeypot feed, plus a paste-anything triage workbench powered by your configured AI provider. Pick an alert from the queue or drop in a log line, EDR event, or SIEM payload.
Paste raw alert text or pick a sample to see how the Co-Analyst classifies, maps to MITRE, and recommends actions.
Inspect raw payload and simulate response.