Using the Dynamic Threat Ranges Reporting Dashboard

This guide shows you how to open the Dynamic Threat Ranges reporting dashboard and use it to review team performance and run debrief conversations after an exercise.

When an exercise ends, the dashboard shows how each team performed, how performance changed over time, and which answers each team submitted. Use it to see where teams did well and where they struggled.

After a Threat Range exercise concludes:

1. Go to the Exercise Overview page for that exercise.

2. Click "View after action report".

3. The reporting dashboard opens.

Note: The report opens straight away, but the full data can take up to 2 minutes to load while the system processes performance metrics. A loading indicator shows while this happens.

At the top of the dashboard, you'll find:

• The exercise name and description

• The SIEM platform or platforms you configured for the exercise

• The number of teams and total participants

• The exercise settings

This reminds you what the exercise covered and how it was set up.

Two numbers summarise overall performance: average time to complete and average accuracy. They show whether teams were fast, accurate, or struggled with either.

A table shows each team's results:

• Team name or identifier

• Overall accuracy (the percentage of questions answered correctly)

• Time to complete

• Relative ranking, showing how each team compared with the others

To see who was on a team: Click the team's row to view its members.

This table answers: which teams performed well overall, and which teams struggled?

A line chart shows how far each team got through the exercise over time.

• Horizontal axis (X): Time elapsed from start to finish

• Vertical axis (Y): Percentage of tasks completed (0% to 100%)

• Each line: One team's progress

To compare specific teams: Toggle team lines on and off. Hide teams to focus on a few at a time.

To see details: Hover over any point on a line to see the data for that moment.

This chart shows whether teams moved steadily through the exercise or hit a wall, and which phase was fastest or slowest.

A table lists every question in the exercise. For each question, you can see:

• Each team's answer

• Whether the answer was correct or incorrect

• Whether a team overwrote a teammate's earlier answer, where that applies

To see the full question and submission details: Click a task row to expand it. You'll see the question text and each team's answer.

If a team didn't submit an answer to a question, the cell reads "no submission".

Work through these steps in order to build a complete picture:

1. Review the headline metrics. Are they high, low, or in line with expectations?

2. Look at the team comparison table. Which teams ranked highest and lowest?

3. Study the task completion chart. Where did teams slow down or speed up? Did every team follow the same pattern?

4. Zoom into the task details. Where did performance vary most? Which questions caused difficulty?

5. Ask coaching questions. What learning gaps or collaboration patterns stand out?

Example: "Our average accuracy was 78 percent. Team A hit 82 percent and Team B hit 74 percent. Team A finished in 23 minutes and Team B took 27. The chart shows Team B slowed at the 15-minute mark. Let's look at task 7. Team B answered [answer] and Team A answered [answer]. Why did you choose differently?"

To save or share the report:

1. Click "Export to PDF", usually in the upper right of the dashboard.

2. Your browser downloads a PDF of the full report.

3. Share the PDF with your team or managers, or keep it for your records.

To search the PDF: Use your PDF reader's search function (Ctrl+F on Windows, Cmd+F on Mac) to find team names, task numbers, or metrics.

The dashboard has no in-app search, so export to PDF if you need to find something quickly.

If you ran an exercise with only one team, the comparison table shows only that team. Ranking columns and other teams' results are hidden because there is nothing to compare. The other sections work the same way.

If a team didn't answer a question, the task details matrix shows "no submission" in that team's cell. The label is shown clearly in the interface.

When you click into that task, you'll still see the question. The team's submission cell stays empty or reads "no submission."

Ask open-ended questions rather than stating conclusions.

Instead of: "You got task 5 wrong." Try: "On task 5 you submitted [answer]. The correct answer was [answer]. What was your thinking?"

Instead of: "Your team was too slow." Try: "You finished in 27 minutes. The chart shows steady progress for 15 minutes, then the line flattens. What happened there?"

Instead of: "You should have listened to your teammate." Try: "On task 3 your teammate submitted one answer, then you submitted a different one. What made you change it?"

Questions like these help learners reflect on their own decisions and patterns.

How long is the data kept? 

Report data is kept indefinitely. You can open reports from exercises that ran weeks, months, or years ago.

Can I compare multiple exercises? 

Not in the dashboard. You can, however, export the reports as PDFs and compare them side by side.

Can learners access this report on their own? 

No. Learners see the report only in a facilitator-led presentation, or when you share the exported PDF with them.

What if I need to review the report again later? 

Go back to the exercise overview page and click "View after action report" again. The data stays saved and is always available.