Demo Mode: bundled sample data. Run locally for full features.
Attack Simulator (Detections Lab)
Demo Mode replays a realistic timeline locally. Local Mode runs a localhost-only simulator + timeline store.
Scenarios
Timeline Window (ISO8601)
Tip: set `since` to a few minutes ago before running a scenario.
Recent Timeline Events
No events found for this window.