STOP THE HACKER

Compromised 0/0

Level

Budget

Time

02:00

IDENTITY MANAGEMENT

User	Role	Status	Action

SOC ACTIONS

Study latest attack vectors (+$100) Train users on phishing awareness Scan network for threats Update threat signatures (+$50)

SOC ALERT LOG

STOP THE HACKER

You are the new SOC Analyst. Defend the network.
Don't let infection reach 50%.

ORIGIN STORY

WHY "STOP THE HACKER"?

We built this simulation for one reason: To demonstrate the chaos of manual security operations.

In the real world, "Manual Security" is a myth. Threats move at the speed of light. Hackers don't sleep. Data breaches happen in milliseconds.

We wanted to create a fun, educational experience that puts YOU in the seat of a level-1 SOC analyst. You'll quickly see that without the right tools, you are destined to fail.

Simulated Chaos

Real Lessons

THE IT BURNOUT CRISIS

52%

of IT Professionals reporting Burnout

Constant "fire fighting" leaves no time for innovation.

200+

Days to Detect a Breach

Manual monitoring misses stealthy persistence.

100%

Impossible to Scale

You can't hire enough humans to watch every log.

THE SOLUTION

SECURITY ARSENAL ALERTMONITOR

The platform that fills the void. Powered by 24 years of expertise in unraveling failures others couldn't solve. Designed by security engineers who think outside the box.

Multi-Client Architecture

Complete isolation. Manage 50+ clients from a single pane of glass. Specific policies, specific reports.

Intelligent Automation

Don't wake up for a service restart. Our AI agents handle remediation, patching, and cleanups automatically.

Human Behavior Emulation

We don't just "ping" your website. We log in, click around, and verify content like a real user.

RMM Extended

Go beyond basic RMM. Deep database monitoring, event log correlation, and advanced SNMP management.

Visual Validation

See what's happening. Screenshot capture and visual diffs ensure your apps look right, not just respond 200 OK.

Happier IT Staff

Stop putting out fires. Start working on projects that matter. Let AlertMonitor handle the noise.

SECURITY VENDOR

Budget: $0

Purchase tools to defend your network. Game is PAUSED while shopping.

                                    Zeek
                                    SensorPassive network monitor. detects anomalies.
                                
$0

                                    Wazuh
                                    AgentHost-based intrusion detection.
$0

                                    Onion
                                    SecurityLayered defense analysis tool.
$0
Canary
                                    TokenTraps attackers. Alerts on any interaction.
                                
$0

                                    VelociraptorLive Forensics & Hunting.
$0
IPS
                                    ApplianceIntrusion Prevention System.
$2000
AI
                                    Security AgentAutonomous defense system.
$5000

                                    PRO Vulnerability ScanScans and remediates vulnerabilities to harden
                                    network and slow down attackers.
$2500

                        Managed SOC Add-ons
                    

                                    WiFi Security (WIPS)Detects Rogue Devices and War Driving
                                    attacks
                                    in
                                    real-time.
$2,500

                                    
                                    
                                        Security Arsenal Alert Monitor
                                
Full Automation. Replaces Intune/RMM. AI Patching.
                                    Software
                                    Monitoring. Cisco Management. Total Defense.
$80,000

SOC Analyst Handbook

                    Mission
                    Network
                    Glossary
                    Tools
                    Tactics
                
1. Your MissionYou are the Level 1 Analyst for Security Arsenal's SOC (Security Operations Center).
                        Hackers are targeting the network. If 50% of devices become compromised
                        (RED),
                        the network collapses and you are fired.
2. Network TopologyThe network simulates a modern enterprise "Hub & Spoke" architecture:
Rosemount (HQ): The central core. Contains the
                            Firewall
                            and critical Servers.
Site Clusters: Remote offices (Dallas, Chicago, NY)
                            connected via VPN Tunnels (Dashed Lines).
Cloud (Enterprise): AWS, Azure, and M365
                            environments
                            linked to HQ.
Mobile/Guest: Phones are segregated to the "DMZ" to
                            protect corporate data.

                    3. Key Terms (Glossary)
                    
                        IOC
                        "Indicator of Compromise". E.g., a strange IP address or file hash that
                            proves you were hacked.

                        Remediation
                        Cleaning a device. Removing the virus/hacker access.

                        Lateral Movement
                        Hackers jumping from one device (Patient Zero) to others. Isolate
                            devices
                            to stop this!

                        SIEM
                        "Security Information and Event Management". The system that collects
                            all
                            logs (your bottom panel).
                    
                
4. Your Arsenal (Tools)
                            Zeek Sensor (Free): Passive network monitor. Detects
                            strange traffic patterns, protocol anomalies, and C2 communication. Deploy on switches.
                            Good
                            first line of defense. FREE
                        

                            Wazuh Agent (Free): Host-based IDS/IPS. Detects file
                            changes,
                            rootkits, and malware *on* the device itself. Deploy on servers and critical
                            workstations.
                            FREE
                        

                            Velociraptor (Free): Forensic and threat hunting
                            platform. Provides EDR capabilities, artifact collection, and real-time threat hunting
                            across all endpoints. Deploy on devices for deep visibility. FREE
                        

                            Canary Tokens (Free): Honeypot "traps". Deploy on
                            servers
                            or devices. If a
                            hacker touches it → IMMEDIATE ALERT with full forensic details. Excellent early warning
                            system. FREE
                        

                            WiFi Security / WIPS ($2.5k): Wireless Intrusion
                            Prevention System. Detects rogue access points, war driving attacks, and evil twin APs.
                            Essential for wireless network protection.
                        

                            IPS/IDS ($2k): Intrusion Prevention System. Blocks
                            50%
                            of incoming attacks automatically at the perimeter. Layer 7 deep packet inspection.
                        

                            Vulnerability Scanner ($500 per scan): Runs
                            comprehensive
                            network assessment and patches critical CVEs. Reduces attack surface by 50%.
                        

                            WiFi Security / WIPS ($2.5k): Wireless Intrusion
                            Prevention System. Detects rogue access points and war driving attacks in real-time.
                        

                            AI Defense ($5k): Machine learning powered
                            auto-response. Automatically isolates compromised devices when detected. Your SOC on
                            autopilot.
                        

                            AlertMonitor / Security Arsenal ($80k): The
                            ultimate
                            unified security platform. Auto-patches, auto-remediates, auto-deploys canary tokens,
                            unified sensor management, automated threat hunting, and real-time correlation. Your
                            complete MSP SOC in a box. ULTIMATE
                        

                        Pro Tip: Save for Security Arsenal
                        ($80k)
                        - the ultimate unified SOC platform with full automation, AI patching, and auto-remediation.
                    

                    5. Winning Tactics
                    Layered Defense: Don't rely on one
                            tool.
                            Use Zeek + Wazuh together.
Isolate Compromised Hosts: If a device
                            turns RED, create a "Firebreak". Isolate (Grey out) the devices *around* it to stop the
                            spread.
Protect Criticals: Always prioritize
                            protecting Servers (Database, Exchange). If they fall, data loss is massive.

                

                    Handbook v2.1 | Authorized for Clearance Level 1
                

CAN YOU STOP THE HACKERS?

DEPLOYING ALERTMONITOR

STOP THE HACKER

Level Complete!

Round Stats

Advanced Controls

NOTICE OF TERMINATION

YOU'RE FIRED!!!

FORENSIC REPORT

Recommended Actions

WHY "STOP THE HACKER"?

Simulated Chaos

Real Lessons

THE IT BURNOUT CRISIS

52%

200+

100%

SECURITY ARSENAL ALERTMONITOR

Multi-Client Architecture

Intelligent Automation

Human Behavior Emulation

RMM Extended

Visual Validation

Happier IT Staff

READY TO UPGRADE?

SWAT TEAM

DEPLOYED

SECURITY VENDOR

Zeek Sensor

Wazuh Agent

Onion Security

Canary Token

Velociraptor

IPS Appliance

AI Security Agent

PRO Vulnerability Scan

Managed SOC Add-ons

WiFi Security (WIPS)

Security Arsenal Alert Monitor

SOC Analyst Handbook

1. Your Mission

2. Network Topology

3. Key Terms (Glossary)

4. Your Arsenal (Tools)

5. Winning Tactics