Synthetic SOC simulation
Inspect the evidence before an action becomes a decision.
Select a harmless scenario, run its fixed triage playbook, and make a human approval decision. Nothing here uses a model or reaches a live security system.
4 synthetic alerts Invalid domains and inert fixtures only.
Deterministic triage Known scenario, known playbook.
Human gate Proposals remain simulated after approval.
SYN-PHISH-001
Credential-harvest email reported
A simulated staff mailbox received a brand-impersonation message linking to a synthetic credential page.
- Entity
- user.alex@example.invalid
- Source
- Synthetic Email Gateway
- Observed
- 13 July 2026 UTC
Run the local playbook to produce triage rationale, an investigation path and a ticket draft.