foyl Shift live desk
Take the desk.
Thirty minutes inside a living SOC. Three curated desks - Foundation, Intermediate and Capstone - each a hand-built incident. Work the queue as it arrives, pull context from the same consoles you train on, contact the people involved, make the call, and leave the next analyst a handoff they can trust.
Loading the shift board…
01
Work the queue
Signals arrive while the clock runs. You decide what deserves attention first - a loud alert is not always the important one.
02
Use the floor
Open the same SIEM, EDR, mail, identity, and network consoles used across foyl Learn to gather evidence and confirm context.
03
Own the call
Contact users, record what you validated, disposition each alert, and explain your judgment in the handoff.
0alerts queued
30minutes
Normalenvironment
Expected signal pressurevolume only - severities stay unknown until they arrive
start+10 min+20 minhand off
⏴ Previous analyst handoff
◉ Business context
⚙ Maintenance windows
◎ Shift objectives
Desk parameters the queue is rebuilt deterministically from a seed - no two runs repeat
Difficulty
Noise
Speed
Support level the incident is identical - only the coaching changes
The clock starts when you begin. Work the queue, open the real consoles for evidence, and hand off before time runs out.
Shift status
Live totals for the desk you are running0open cases
0alerts dispositioned
0people contacted
0consoles opened
0%shift coverage
Shift debrief
/ 100
Case-by-case review instructor truth revealed