← Back to Shield House

THREAT RUNNER

SHIELD HOUSE // SOC DIVISION

// BACKSTORY

You are AGENT-X, a SOC analyst patrolling the ruins of a city ravaged by cyber warfare. A spreading malware wave is consuming the network behind you. The threat landscape shifts with every block. Run the gauntlet. Neutralize what you can. Outrun the corruption.


// CONTROLS

SPACE / UP - Jump DOWN - Duck SHIFT - Deploy Tool

// SECURITY TOOLKIT

L1SIEM Alert (Double Jump)
L2Firewall (Speed Dash)
L3IDS Shield (Absorb Hit)
L4Honeypot (Slow Motion)
L5IR Nuke (Clear All)

// INCIDENT RESPONSE (NIST)

Core phases of the NIST IR lifecycle. The DETECT/CONTAIN/ERADICATE/RECOVER levels are these phases in order; RECON and APT STORM are game bookends, not IR phases.

1Detect: spot the incident and scope it
2Contain: limit spread, isolate systems
3Eradicate: remove the threat and root cause
4Recover: restore systems to normal ops