HTB Threat Range

HTB Threat Range is a team-based, live-fire simulation environment designed to strengthen and measure SOC and DFIR operational readiness under realistic cyber attack conditions. Teams work collaboratively through the complete incident response lifecycle—from alert triage and escalation to forensic investigation, incident reconstruction, reporting, and post-exercise review—helping break down silos between SOC, Forensics, and Incident Response functions.

Realistic adversary scenarios provide the logs, alerts, network traffic, and artifacts teams need to investigate incidents directly within SIEM and EDR tools. Participants are evaluated on factors such as speed, accuracy, escalation quality, and noise reduction, creating a practical environment for developing and validating real-world defensive capabilities.

Performance is quantified through the Threat Resilience Index (TRI) and post-event analytics, giving security leaders measurable insight into team resilience, collaboration, and investigative accuracy. Metrics including MTTD, MTTI, MTTR, SLA adherence, and true-positive/false-positive accuracy help organizations benchmark current capabilities, identify areas for improvement, and track operational readiness over time.