No ticket claimed.
Claim the focused alert to start your investigation.
Claim a ticket to open the endpoint console.
Claim a ticket to open the artifact desk.
Tier-1 SOC · day shift
You are the analyst on the console. Author playbooks, triage the alert queue, apply the right book, and close the case.
No ticket claimed.
Claim the focused alert to start your investigation.
Pick a conversation
or wait for the next ping
Pick a handoff
or wait for the next ask