A new analytics experience

We replaced all legacy D3 visualizations with more than twenty new ECharts visualizations. Every chart polls live data and exports to CSV.

Organizers work with a dedicated Training analysis dashboard offering three perspectives:

– Aggregated — the instance as a whole: status tiles, progress over time, scoreboard, players per level, score attainment, level difficulty, top wrong answers, and command analysis

– Trainee — a single run end-to-end: cumulative score, time against score, event timeline, and a full command log with host, source IP, and working directory

– Assessment — the distribution of answers per question, supporting question quality and difficulty analysis, with CSV export

After finishing a training session, trainees now see a summary of their run: how it ended, the score they achieved, and how their score and time compare with the other participants.

Performance

Dashboard performance has improved significantly, and the load on the backend during large exercises has dropped substantially. A new event query engine backs every chart. Events sync into a local database inside a web worker, so charts query locally instead of over the network. A watermark per instance and event type ensures only new events are fetched, and polling pauses while the browser tab is hidden.

Reworked score export

Score export now gives instructors a complete picture of results, ready for grading and for import into other systems. Scores are also now broken down per level, with the assessment score separated from the training score. The UI exports a CSV covering rank, identity, state, timing, per-level scores, hints, wrong answers, and solutions displayed. The API returns an equivalent structured JSON report.

Sandbox and infrastructure

Sandboxes gain new network monitoring capabilities, faster handling of definitions, and a more secure baseline.

– Network traffic forwarding (port mirroring) for OpenStack (Neutron TaaS with OVN) and AWS (VPC Traffic Mirroring on Nitro instances)

– Configurable caching for the GitHub sandbox-definition provider

– Event storage migrated from Elasticsearch to OpenSearch

– Windows sandbox hosts now default to PowerShell for SSH communication

– Migration to Python 3.12+ and resolution of outstanding CVEs across the sandbox and Guacamole services

Retired components

Adaptive Training, the Adaptive Smart Assistant, and the Elasticsearch service have been deprecated and archived. The MITRE technique service now exposes a single unified training-techniques endpoint.