Simulation. Every event on this page is generated locally by a seeded pseudo-random generator. There is no backend, no ingestion pipeline and no real network telemetry — the detection, ATT&CK mapping and correlation logic is real, the data is not.
Threat timeline
Stacked severity counts on absolute time buckets across the selected window.
Detection distribution
Share of events per detection rule. Each rule keeps a stable colour.
Geographic origins
Event volume by claimed origin country.
Top threat sources
Score is deterministic: severity weight + volume + breadth + kill-chain span.
| Source IP | Origin | Events | Score | Severity |
|---|
MITRE ATT&CK coverage
Detections rolled up by tactic, then technique.
Alert correlation engine
Order-aware, multi-event rules. Co-occurrence alone is not a chain.
Event feed
Most recent 60 matching events.
Incident report
Generated from the events currently in view.