L1
L1 Analyst
SOC · New York

L1 Triage Bench

Your personal workspace — cases assigned to you, what's unassigned in the queue, and your shift activity.

Assigned to youCases you've picked up. Work these to SLA before grabbing more.
0
active cases
SLA at risk (yours)Your assigned cases with less than 15 minutes of triage SLA remaining.
0
< 15 min left
Unassigned in queueOpen cases nobody owns yet. Click 'Claim' to assign one to yourself.
8
available to claim
Closed this shiftCases you've closed during this session. Counts toward your shift KPIs.
0
dispositioned

My assigned cases (0)Cases currently assigned to you. Sorted by SLA urgency.

No cases assigned yet — claim one from the unassigned list below.

Unassigned queue (8)Open cases without an owner. Claim one to start triage.

RiskCaseEntitySourcesSeverityStatusSLAAdvisory
94
CASE-2026-0847
Bulk borrower-NPI egress by departing Loan Operations Analyst
3 cross-case links
James Mitchell
EMP-4471 · Mortgage Servicing
DLP×6Proxy×4SIEM×4
CriticalIn Triage
11m
ESCALATE92%
79
CASE-2026-0850
Finance user — failed-logins-then-success + unusual download
Maria Rossi
EMP-1108 · Finance
DLP×1Proxy×1SIEM×2
HighNew
25m
ESCALATE74%
56
CASE-2026-0849
Developer hit paste-site + cross-team repo access
1 cross-case link
Thomas Müller
EMP-3380 · Platform Engineering
Proxy×1SIEM×1
MediumNew
90m
INVESTIGATE71%
41
CASE-2026-0852
Contractor email to personal — small spreadsheet (no NPI)
1 cross-case link
Lucas Fernandez
EMP-9921 · Analytics
DLP×1
MediumPending Info
120m
INVESTIGATE64%
38
CASE-2026-0854
AI external enrichment BLOCKED — IOC contained borrower PII
1 cross-case link
James Mitchell
EMP-4471 · Mortgage Servicing
DLP×1
MediumNew
95m
INVESTIGATE81%
32
CASE-2026-0851
HR user — large download from L&D portal
David Park
EMP-5520 · HR
Proxy×1SIEM×1
LowNew
360m
CLOSE80%
22
CASE-2026-0853
Servicing agent — proxy alert to crypto site (off-hours browsing)
1 cross-case link
Michael Johnson
EMP-7732 · Mortgage Servicing
Proxy×1
LowNew
480m
CLOSE84%
18
CASE-2026-0848
Marketing user emailed brochure to personal address
Emma Wilson
EMP-2210 · Marketing
DLP×1
LowNew
240m
CLOSE88%

Escalated (0)Cases you've handed off to L2. Track here until L2 acknowledges.

No escalations this shift.

Closed this shift (0)Recently dispositioned cases. Click to review the audit trail.

Nothing closed yet.