Incident simulation · Scenario 01
Incident Commander
A branch has lost access to core applications. Restore service, preserve diagnostic evidence, and control risk.
Fictional scenario. Every address, hostname and site here is invented; IP addresses use the ranges reserved for documentation (RFC 5737).
Operations Room
9 PLAYABLE SCENARIOSChoose an incident scenario
Each session selects a hidden root cause. Commands, evidence, and consequences will change.
Simulation mode
Mode changes hints, time penalties, and SLA pressure.
SEV-2 · INC-2409Branch A branch is unreachable
Packet loss has spiked on the primary WAN. A backup link is available but inactive.
09:14WIB
Live topologyPrimary path degraded
HealthyDegraded
Branch ASD-WAN edge
Primary WAN87% packet loss
Backup WANStandby
Private cloudVPN hub
Core appsSAP · Email · Files
01Triage02Diagnose03Contain04Verify
?
How to play
- Run commands to collect operational evidence.
- Commands consume simulated time and affect your score.
- Commit a decision once the minimum evidence is found.
Ramantya NOC OS 2.4 · Incident sandbox
[SYSTEM] Session attached to branch-a.
Type help to list the available commands.
Stage 01 · Triage
Choose your initial response
You have just received the alert. Your first action will shape the quality of the investigation.
Evidence collected0/2