Range idle
Containment 0/0
drag to orbit · scroll to zoom · click any node
This browser cannot render the 3D range (WebGL unavailable). The kill chain on the left and the host dossier on the right still tell the whole story - step through the replay with the controls below.
Range clear
Incident contained
Armed Pick a campaign to replay
0 / 0
foyl Range
The SecIntel network, in 3D
Every incident you have met in the mock tools happened somewhere on this map. The Range replays them hop by hop across the real topology - so you stop seeing alerts as rows in a queue and start seeing them as movement through a network.
How it works
01Pick a campaign on the left and press play. Watch the attack traverse the map, one kill-chain step at a time.
02Click any node - on the map or in the chain - to open its dossier, then jump straight to the evidence in the SIEM, EDR, Identity and the rest.
03When the replay ends, contain every compromised host to clear the range. Clear all four campaigns to complete the Range.
Back to foyl Learn