Sample team report
Demo SOC
A sample from a demo team: its analysts are demo accounts, not real people. This is what a team manager sees.
3 analysts1 qualified for Tier 12 in progress
Qualification
Each analyst's progress toward their target tier: every published case at or below it.
- Analyst 1Tier 1 Analyst
Qualified, Tier 1
Completed 30 Oct 2026 (UTC)
Next: Tier 2, 0 of 4
- Analyst 2Tier 1 Analyst
Tier 1: 1 of 12 cases
- Analyst 3Tier 1 Analyst
Tier 1: 0 of 12 cases
Skills
For each analyst, how many of the published cases that exercise each skill they have passed.
| Analyst | Alert triageof 3 | SIEM searchof 13 | Log analysisof 9 | Investigation scopingof 9 | Timeline reconstructionof 2 | Evidence and reportingof 8 |
|---|---|---|---|---|---|---|
| Analyst 1 | 1 of 3 | 9 of 13 | 7 of 9 | 6 of 9 | 0 of 2 | 5 of 8 |
| Analyst 2 | 0 of 3 | 0 of 13 | 0 of 9 | 1 of 9 | 0 of 2 | 1 of 8 |
| Analyst 3 | 0 of 3 | 0 of 13 | 0 of 9 | 0 of 9 | 0 of 2 | 0 of 8 |
ATT&CK coverage
How well the team identifies the ATT&CK tactics it has met.
- Initial Access100% identified correctly
- Execution100% identified correctly
- Persistence100% identified correctly
- Privilege Escalation100% identified correctly
- Stealth100% identified correctly
- Defense Impairment100% identified correctly
- Credential Access100% identified correctly
- Discovery100% identified correctly
- Lateral Movement100% identified correctly
- Collection100% identified correctly
- Command and Control100% identified correctly
- Exfiltration100% identified correctly
- Impact100% identified correctly
Managers also see the same coverage by technique.
Completion
Investigations each analyst has run, and how many distinct cases they have passed.
| Analyst | Role | Investigations | Cases passed | Avg score | Median time | Qualified | Last activity (UTC) |
|---|---|---|---|---|---|---|---|
| Analyst 1 | Tier 1 Analyst | 12 | 12 | 91%8 Practice · 4 Assessment | 4m | yes | 30 Oct 2026 |
| Analyst 2 | Tier 1 Analyst | 1 | 1 | 100%1 Practice | 2m | no | 30 Oct 2026 |
| Analyst 3 | Tier 1 Analyst | — | — | — | — | no | not started |
Team activity
Invitations, joins, departures, removals, role changes and changes to analysts’ targets, newest first. The latest 200 are shown. Times are UTC.
Nothing has happened on this team yet.