L1 Triage Bench
Your personal workspace — cases assigned to you, what's unassigned in the queue, and your shift activity.
Assigned to youCases you've picked up. Work these to SLA before grabbing more.
0
active cases
SLA at risk (yours)Your assigned cases with less than 15 minutes of triage SLA remaining.
0
< 15 min left
Unassigned in queueOpen cases nobody owns yet. Click 'Claim' to assign one to yourself.
9
available to claim
Closed this shiftCases you've closed during this session. Counts toward your shift KPIs.
0
dispositioned
My assigned cases (0)Cases currently assigned to you. Sorted by SLA urgency.
No cases assigned yet — claim one from the unassigned list below.
Unassigned queue (9)Open cases without an owner. Claim one to start triage.
| Risk | Case | Entity | Sources | MITRE | Severity | Status | SLA | Advisory | ||
|---|---|---|---|---|---|---|---|---|---|---|
94 | CASE-2026-0847 Bulk borrower-NPI egress by departing Loan Operations Analyst3 cross-case links | James Mitchell EMP-4471 · Mortgage Servicing | DLP×6Proxy×4SIEM×4 | MITRE T1078MITRE T1530+5 | Critical | In Triage | 11m | ESCALATE92% | ||
79 | CASE-2026-0850 Finance user — failed-logins-then-success + unusual download | Maria Rossi EMP-1108 · Finance | DLP×1Proxy×1SIEM×2 | MITRE T1110MITRE T1078 | High | New | 25m | ESCALATE74% | ||
56 | CASE-2026-0849 Developer hit paste-site + cross-team repo access1 cross-case link | Thomas Müller EMP-3380 · Platform Engineering | Proxy×1SIEM×1 | MITRE T1213MITRE T1567 | Medium | New | 90m | INVESTIGATE71% | ||
41 | CASE-2026-0852 Contractor email to personal — small spreadsheet (no NPI)1 cross-case link | Lucas Fernandez EMP-9921 · Analytics | DLP×1 | MITRE T1048 | Medium | Pending Info | 120m | INVESTIGATE64% | ||
38 | CASE-2026-0854 AI external enrichment BLOCKED — IOC contained borrower PII1 cross-case link | James Mitchell EMP-4471 · Mortgage Servicing | DLP×1 | MITRE T1048 | Medium | New | 95m | INVESTIGATE81% | ||
32 | CASE-2026-0851 HR user — large download from L&D portal | David Park EMP-5520 · HR | Proxy×1SIEM×1 | MITRE T1213 | Low | New | 360m | CLOSE80% | ||
22 | CASE-2026-0853 Servicing agent — proxy alert to crypto site (off-hours browsing)1 cross-case link | Michael Johnson EMP-7732 · Mortgage Servicing | Proxy×1 | Low | New | 480m | CLOSE84% | |||
22 | CASE-2026-0855 Detokenization request DENIED — L1 attempted Reveal on SSN1 cross-case link | James Mitchell EMP-4471 · Mortgage Servicing | DLP×1 | Low | Pending Info | 180m | INVESTIGATE90% |
Escalated (0)Cases you've handed off to L2. Track here until L2 acknowledges.
No escalations this shift.
Closed this shift (0)Recently dispositioned cases. Click to review the audit trail.
Nothing closed yet.