Crowd Space/Aegis Dashboard

Loading dashboard… If this message stays, WordPress or a plugin is blocking scripts on this page.
Live Threat Feed · Last sync: — Next scheduled sync: — · Sync age: —

Security Operations Dashboard

Incident ID Customer / Tenant Threat Type Severity Status SLA Due Analyst Flags

Open New Security Incident

🛡️
Drop PCAP, memory dumps, or Falcon logs here
JSON, CSV, PCAP, EVTX · Max 500 MB

Live Incident Response Board

Incident Detail

Incident Details

Related Detections & Hosts

Detection ID Hostname Technique Confidence Status

Response Timeline

    Customer Portal · Acme Financial Corp

    Secure read-only view for the tenant
    Secure customer-facing view. Tenants can track open incidents, download containment reports, and upload additional context without accessing the internal SOC console.
    Reference Type Opened Status ETA / Closed Action

    Recent Activity

      Threat & Performance Reports

      Incidents by Threat Type

      📊 Malware · Ransomware · Identity · Cloud

      SLA Compliance Trend

      📈 MTTA / MTTR – last 30 days

      Tenant Performance

      Tenant Incidents (30d) Critical On-Time % Avg MTTR Containment Rate

      Error Codes & Stale Incident Flags

      Built-in error codes automatically flag incidents that are stale, past SLA, or linked to outdated application / agent data.

      CodeMeaningSeverityAction
      E-STALE-01Incident age exceeds SLA windowCriticalAuto-flag + escalate
      E-STALE-02No analyst update in > 50% of remaining SLAWarningNotify queue
      E-OLD-APPSensor / agent version or tenant config last updated > 7 daysWarningRequire re-validation
      E-MISS-TELRequired telemetry missing past grace periodCriticalHold + tenant notify
      E-LOW-CONFDetection confidence below thresholdWarningRoute to Tier-2
      E-SLA-BREACHHard SLA deadline passedBreachEscalate + log
      TimeIncident / RefCodeMessageStatus