Back to Floor
The SOC Floor • Room 2
Incident Review Dashboard
The **Incident Review** dashboard is where analysts triage, investigate, and manage **Notable Events**.
A notable event is generated by a Correlation Search when a specific security policy or threshold is violated.
Analysts can change the status (New, In Progress, Closed), assign the event to an owner, and execute Adaptive Response Actions directly from this dashboard.
Knowledge Check
Prove your understanding to clear the room (Rewards XP)
Drag items to their correct zone (or tap item then tap zone on mobile)
High-level 24hr summary
Change notable event status
Assign an owner to an alert
Executive domain breakdown
Security Posture
Incident Review