Interactive Demo

See the FALYS SOC console in action

This is the real console layout — Home, Dashboard, Event History, Agents, Detections and Settings — wired up to simulated data instead of a live deployment. Click around freely.

Every endpoint, event, alert and email below is synthetically generated in your browser for demonstration purposes and regenerates on reload. No real infrastructure, files or inboxes are involved.
Administrator
Signed in as admin · Sign Out
Home
Dashboard
Event History
Timeline
Agents
Detections
Settings

FALYS Security Operations Center

Real-Time Filesystem Anomaly Detection & Enterprise-Grade Threat Response

Endpoints Protected
0
—
Total Events Logged
0
— in the last hour
Threats Detected
0
0 high severity
Email Alerts Sent
0
Email alerts enabled
Dashboard Live (real-time)
Last updated: —
Endpoints Protected
0
● Live
Events Today
0
Threats Detected
0
Alerts Sent
0
Agents Online
0/0
● Live
Events / Min
0
● Live

Live Event Timeline

    Event Trend — Last 24 Hours

    Event Distribution

    Events by Host

    Severity Breakdown

    Threat Detections

    Live output of the rule + anomaly + correlation detection engine — see Detections for the full classified event table and incident feed.
    Recent High-Priority Events
    Active Incidents

    Top Modified Files

    Live Agent Status

    Recent Alerts

    System Health

    Server Uptime0m
    Total Events Logged0
    MonitoringActive
    Email AlertsEnabled
    Event History
    Full filesystem event log across all endpoints

    All Events

    TimeHostEventFileUser
    0 events
    Page 1
    Timeline
    Chronological feed of every filesystem event, grouped by day
    Connected Agents
    —

    Deploy a New Agent

    A single compiled binary with this deployment's config already filled in — no Python required on the endpoint either way.
    Platform
    Folder to watch on that machine
    Alert email (focal person for this agent)
    Alerts for events from this agent would go only to the email above — not to every recipient on the server's default alert list.
    Detections Live (real-time)
    Detection engine · rule scoring · behavioral anomaly · correlation · updated —
    What do these labels mean? Show guide
    Critical — confirmed high-confidence pattern (e.g. mass deletion combined with off-hours access).
    High Risk — strong indicators of risk that warrant review.
    Suspicious — anomalous but inconclusive on its own.
    Low Risk — minor deviation from the endpoint's normal baseline.
    Legitimate — matches expected, routine behavior.
    Critical
    0
    High Risk
    0
    Suspicious
    0
    Low Risk / Legitimate
    0
    Active Incidents
    0

    Classification Breakdown

    Correlated Incidents

    0 active
    Related events the engine has linked together — bursts, staged tampering patterns — across a sliding time window per host.

    Classified Events

    0 of 0 events
    TimeHostEventFileClassificationScoreConfidenceReasons
    Page 1
    System Settings
    These controls actually drive this demo's simulation — try them

    System Status LIVE

    Real-time File Monitoring
    Active on all connected agents
    Email Alerting (Brevo)
    Connected to soc-team@falys-demo.io

    Alert & Agent Settings

    High Severity Threshold
    Trigger on delete or move events per host
    Auto Agent Discovery
    Poll agent activity automatically
    Agent Offline Threshold
    Mark an agent Offline after no events for this long

    Dashboard Settings

    Real-time Refresh Interval
    How often the Dashboard and Agents pages poll for updates