Skip to main content

Introducing Replay

Support
Support
Fluency Support

Fluency is launching Replay, a scenario-based training and testing platform. Replay plays real, sanitized security telemetry into a Fluency instance, so analysts — and AI — can work a realistic incident from first alert to response in a controlled, repeatable environment.

How it works​

  • Scenarios from real telemetry. Each scenario replays recorded events as raw telemetry, with real log formats and their inconsistencies, through the same pipeline a live instance uses.
  • A guided workbook. A scenario is worked through in stages that mirror a SOC: Replay, Tier 1: Validation, Tier 2: Scoping, Tier 3: Response and a closing Hotwash. Each stage shows the workbook's guidance for that step.
  • A one-step receiving setup. The Fluency Replay application sets up the HEC endpoint, router and pipes that receive a scenario on your instance, and gives you the HEC URL and token to enter in Replay.
  • Sign in with Microsoft. Replay uses your Microsoft account.

What it is for​

  • Training analysts on realistic events, tier by tier.
  • Testing detection rules, enrichment and response logic against a known scenario.
  • Evaluating AI triage against consistent, labeled cases.
  • Cyber range exercises built on real telemetry.

See Replay to get started.

Splash Summary

Fluency is launching Replay, a scenario-based training and testing platform. Replay plays real, sanitized security telemetry into a Fluency instance, so analysts — and AI — can work a realistic incident from first alert to response in a controlled, repeatable environment.