Read-only snapshot of LabWatch, the incident queue in my home-lab SOC, taken 2026-09-27. Click an incident to see what the analyst sees.← Back to purplepyram1d
Ctrl K
Checking storage
JM
Johnny MeintelSOC Analyst

Security operations

Incident workspace

Track homelab incidents from intake through investigation, response, and validated closure.

i

Evidence-first workflow. Open a case when the issue is reported, while the lab is running, or after the work is complete. Save partial findings as the investigation develops, preserve uncertainty, and support closure with retained evidence.

◉Active
0requiring analyst action
!Critical
0open critical incidents
◷Awaiting review
0pending final validation
✓Resolved
0validated and closed

Incident queue

0 records

NumberIncidentSeverityStatusCategorySourceAssetOpenedUpdated

No incidents recorded

Create a case from an alert, user report, observed change, or completed lab. Record only what is known and update it as the investigation develops.