RealCyberWork SOC Console
Train like a phishing investigator
Triage tickets, investigate suspected emails, document tool evidence and build a résumé-ready analyst record.
Good morning, analyst
Tier 2 Analyst · 4 items in your queue · 2 approaching SLA
Career Mode
Track ranks, XP and the skills that unlock each SOC tier.
Interview Mode
Rehearse recruiter questions built from your own closed tickets.
Portfolio
Résumé-ready bullets and a skills matrix from completed cases.
Reports
Write, edit and export incident reports with IOCs and ATT&CK.
Today's SOC queue
View allWeekly performance
Common analyst mistakes (cohort)
Recent IOCs
defangedActive investigations
Threat Intel
MoreAiTM phishing kits remain the dominant credential-theft path
Recommended next case
Your identity workspace coverage is 55%. This case is built around OAuth consent abuse.
Open caseDaily challenge
Close two cases with evidence coverage above 80% before end of shift.
1 / 2 complete · +250 XP
Career progression
3,180 XP to Incident Responder — unlocks containment authority.
View career mapRecent achievements
Recent incident reports
Saved email checks
Mentor tip
Two of your last five cases were closed before checking recipient scope. Ask "who else got this?" before you classify.