Operations Funnel
Last 24hEvents of Interest
Correlation Instances
Alerts Generated
Signal / Noise
MTTD
Analyst Queue
Efficiency Report
How well raw signal converts to actionable alerts
Correlation efficiency
Alert yield
MITRE coverage
Pipeline Health
Ingest → normalize → fuse → correlate → alert
Ingest
Connector → raw events
Normalize
OCSF mapping
Fuse
Alert fusion
Correlate
Cross-source correlation
Alert
Final alert emission
Security Operations Center
Entity-risk alerting, confidence-scored triage, and — connected sources
Not loaded yet
Waiting on the metrics API. This panel will say what it found once it answers.
Alert Volume (24h)
Last 24hNot loaded yet
Waiting on the metrics API. This panel will say what it found once it answers.
Severity Breakdown
Not loaded yet
Waiting on the metrics API. This panel will say what it found once it answers.
Top MITRE ATT&CK Tactics
Not loaded yet
Waiting on the metrics API. This panel will say what it found once it answers.
Connected Sources
Not loaded yet
Waiting on the metrics API. This panel will say what it found once it answers.
Live Feed
Connecting…Not receiving events. This panel streams fused alerts from the realtime service; check that it is running and reachable.
SOC Performance
Outcome metrics, agent calibration, and technique coverage. Auto-computed every 30s.
SOC Performance Metrics
No SOC performance data yet
MTTD, MTTR, escalation and false-positive rates are computed from closed cases. They appear once the first investigations complete.
Agent Confidence Calibration (7d)
Predicted confidence vs. actual true-positive rate. Diagonal alignment indicates well-calibrated confidence.
ATT&CK Technique Heatmap
Investigation Cost Telemetry (30d)
Tokens · Latency · Spend per model, aggregated across runsSource of truth for TCO transparency. Per-run breakdowns are available on each investigation detail view.