Leadership track
SOC Management
Keep the queue balanced, the team measured on the right things, and every shift handed over cleanly.
Queue depth
12
Open incidents
3
Mean time to triage
7.6m
Escalation accuracy
91%
Analyst performance
| Analyst | Role | Shift | Open | Closed | Avg triage | Accuracy |
|---|---|---|---|---|---|---|
| A. Pratama | SOC Analyst L2 | Morning | 6 | 21 | 7.4m | 94% |
| R. Wijaya | SOC Analyst L1 | Morning | 11 | 34 | 4.1m | 88% |
| S. Hartono | SOC Analyst L3 | Evening | 3 | 9 | 16.2m | 97% |
| D. Kusuma | Detection Engineer | Evening | 2 | 5 | 12.8m | 92% |
| M. Tanaka | SOC Analyst L1 | Night | 9 | 27 | 5.6m | 85% |
Workload distribution
Open vs closed alerts per analyst today
Shift rota
Morning
- A. Pratama6 open
- R. Wijaya11 open
Evening
- S. Hartono3 open
- D. Kusuma2 open
Night
- M. Tanaka9 open
Shift handover
- · Open critical incidents and their owners
- · Alerts pending decision and why
- · Environment changes and known noise
- · Escalations expected during the next shift
Learn this capability
Hands-on labs that build the technique behind this workspace. Skills transfer to any mainstream SIEM.
Advanced · Theory · 20 min
SOC metrics that matter
You report to the CISO monthly. Choosing the wrong metrics drives the wrong analyst behaviour.
Advanced · Guided Lab · 25 min
Workload and queue management
The queue has grown by 40% this week and two analysts are on leave. Something must give — you decide what.
Advanced · Simulation · 30 min
Shift handover simulation
Shift change. An active incident, a degraded log source and a noisy rule are all in flight. Run the handover.