CYBRARY Bring your own alerts
Take an export out of your own SIEM and work it here. Recognized detections get an ATT&CK step, a place on the breach timeline and a graded case, exactly like the ones this estate raises itself.
The file is read here in your browser. Nothing is stored until you accept the mapping below, and it is stored against the estate you picked — every lab and scenario has its own SIEM, so an alert only exists in the world it was imported into.
Already on this estate
Pick an estate to see its imports.