Cybrary ForgeCYBRARY / FORGE
Back to Replay Theater
Back to ForgeCybrary / Replay Theater

Replay Theater

Four recorded runs, from one analyst working a single endpoint up to two teams racing the same estate. Scrub any of them: every screen, alert and point you see was produced by the same engines that score a live run.

Competition — two teams race the same estate

13:00 · 24 logged actions · 1 alerts

Chapter-by-chapter walkthrough with the pivotal moves called out and coached.

00:00 / 13:02

Triage — what to notice: Watch what they looked at before touching anything — the order of the first three reads usually predicts the whole run.

Participant screens

4 seats · split screen
corvidIncident lead
Desktop
  1. — idle desktop, nothing done yet —
0 actionsno activityDesktop
kiteDefender
Desktop
  1. — idle desktop, nothing done yet —
0 actionsno activityDesktop
merlinDefender
Desktop
  1. — idle desktop, nothing done yet —
0 actionsno activityDesktop
ospreyIncident lead
0 actionsno activityDesktop

Screens are re-rendered from each seat's recorded window track at the cursor — the real layout they had open, reconstructed from state rather than captured as video. Runs recorded before the screen track fall back to a summary of the action log.

  1. Before the first logged action.

Score race

Drawing chart…

Points as they were earned, sampled every 30 seconds of run time.

Standing at 00:00

  1. 1Corax0 actsfp 00
  2. 2Pandion1 actsfp 00

Alerts fired (0/1)

Nothing has tripped a correlation rule yet.

Automation queue

No playbook has been bound yet — automation reacts to the alerts above.

Who was in the room

  • corvid285 pts

    Team Corax — captain · Corax

    6 actions · 4 decisive · noise 0

  • merlin150 pts

    Team Corax — analyst · Corax

    5 actions · 1 decisive · noise 21

  • osprey185 pts

    Team Pandion — captain · Pandion

    7 actions · 5 decisive · noise 0

  • kite100 pts

    Team Pandion — analyst · Pandion

    6 actions · 1 decisive · noise 0

Zoom into any seat in the replay above to watch that person's console on its own, or leave the grid up to see who was reading while someone else pulled the trigger.

How the run scored

807 / 940

Elite96% outcome · rs-2
Scoping100%

4/4 found

Containment100%

3/3 found

Chain reconstruction86%

3/4 found

Gap handling100%

1/1 found

  • Pandion led for eight minutes on speed, then lost it by claiming an asset they never proved.
  • Corax banked the containment flags last, which is where the margin came from.
  • Both teams missed the persistence flag, so nobody scored the final chain stage.

Simulated environment. No real systems, customers or people appear in these recordings. Browse the activity library →