PROsince August 2026
LVL10Bulwark11.5kXP
FA
Born of chaos, built to devour, destined to evolve.
LVL10Bulwark
11,480 / 13,000 XP49%
1,520 XP to Garrison
Total XP11,480
Operations146
Badges21
Accuracy85.2%
First Bloods46
Skill Profile
Skill radar
OverviewAdvanced · 78/100
Detection40/100
Investigation93/100
Precision76/100
Consistency83/100
Tool masteryVolume × first-attempt quality × difficulty
SIEM76/100
Advanced135 ops
XDR75/100
Advanced84 ops
Firewall75/100
Advanced89 ops
Email67/100
Advanced26 ops
Cloud73/100
Advanced29 ops
PCAP
Coming soon
Performance metrics
SRISOC Readiness Index
75
TRΔThreat Response Delta
-26
SYMSkill Symmetry
76
OCSOperational Consistency
79
ASRAttack Surface Readiness
100%
Event dossier
Haunted SOC
27 Oct – 2 Nov 2026
2 / 5
2 of 5 dispositions correct
4 of 5 released event operations closed
| Operation | Verdict | Attempts | Accuracy |
|---|---|---|---|
| TeamFiltration: Password Spray to Forgotten Service Account Takeover | Correct | First try | 80% |
| TerminalFix: Steganographic PNG Payload to a Python Reverse Tunnel | Incorrect | 2 attempts | 67% |
| MSP360 and ScreenConnect: Phishing Installer to Dual-RMM Persistence | Correct | First try | 84% |
| Passkey Help-Desk Vishing: Rogue MFA Registration to SharePoint Data Theft | Incorrect | 7 attempts | 48% |
| The Gentlemen Ransomware: FortiVPN Login to EDR Kill and Rclone Exfiltration | Incorrect | 4 attempts | — |
Daily triage: 6 of 7 cases submitted, 2 correct verdicts
- First Blood · Haunted SOC, Legendary
- Haunted SOC 2026 · All Cases Closed, Legendary
- Midnight Watch · 31.10, Epic
MITRE ATT&CK® Coverage
Coverage across 74 of 95 techniques in 16 ATT&CK tactics.
Initial Access7/7
Execution5/7
Persistence5/8
Privilege Escalation3/4
Defense Evasion5/8
Credential Access13/14
Discovery7/8
Lateral Movement2/3
Collection7/9
Command and Control7/8
Exfiltration4/4
Impact5/7
Reconnaissance1/2
Resource Development0/2
Defense Impairment1/1
Stealth2/3
Recent Activity
Operation Completed
Completed "TRITON: Safety System Sabotage at a Petrochemical Plant"
about 18 hours ago
100% accuracy
Badge Earned
Unlocked "Midnight Watch · 31.10"
1 day ago
+50 pts
Operation Completed
Completed "Midnight Blizzard: Malicious Entra App Registration and Service Principal Abuse"
1 day ago
92.86% accuracy
Badge Earned
Unlocked "Haunted SOC 2026 · All Cases Closed"
2 days ago
+100 pts
Operation Completed
Completed "MSP360 and ScreenConnect: Phishing Installer to Dual-RMM Persistence"
2 days ago
84% accuracy
Operation Completed
Completed "TerminalFix: Steganographic PNG Payload to a Python Reverse Tunnel"
3 days ago
66.67% accuracy
Operation Completed
Completed "Medusa RaaS: VPN access to enterprise encryption"
4 days ago
72.62% accuracy
Operation Completed
Completed "APT41: ShadowPad via Signed-Binary Side-Loading"
5 days ago
90.48% accuracy
First Blood!
First to complete "APT41: ShadowPad via Signed-Binary Side-Loading"
5 days ago
Operation Completed
Completed "TeamFiltration: Password Spray to Forgotten Service Account Takeover"
5 days ago
80% accuracy