Fatigue Mechanics
Progressive fatigue effects that simulate real SOC analyst conditions during long shifts.
Fatigue Mechanics
Long shifts in a real SOC take a measurable toll on analyst performance. Alert fatigue, decision fatigue, and information overload cause accuracy to degrade over time. Shift Mode simulates these effects so you can learn to recognize and manage them before you encounter them in production.
This is not punitive. It is pedagogical. The fatigue system exists to teach you what performance degradation feels like and to help you develop strategies for maintaining effectiveness during extended operations.
How Fatigue Progresses
Fatigue effects activate progressively based on elapsed shift time. Each threshold introduces new effects while maintaining all previous ones:
| Elapsed Time | Fatigue Level | Effects Introduced |
|---|---|---|
| 10% | Minimal | Subtle UI dimming on lower-priority panels |
| 30% | Low | Occasional alert badge delays, minor log rendering lag |
| 50% | Moderate | Tool response latency increases, some alert details require an extra click to expand |
| 70% | High | Comms channel noise increases, correlation suggestions become less specific |
| 90% | Severe | Alert timestamps may display with slight formatting inconsistency, search auto-complete slows |
Effect Categories
Fatigue effects are organized into four categories that mirror real-world fatigue impacts:
UI Effects
Visual changes that subtly degrade the interface clarity. Panel contrast decreases slightly, font rendering may soften, and lower-priority information takes marginally longer to load. These effects simulate the visual fatigue of staring at dashboards for hours.
Tool Effects
Interaction delays that add friction to your workflow. Search queries take slightly longer to return results, alert detail panels open with a brief delay, and cross-window pivoting adds a moment of latency. These effects mirror the sluggish tool performance that SOC analysts often face during peak incident response periods.
Cognitive Effects
Changes that increase the mental effort required for triage. Auto-complete suggestions become less accurate, correlation hints become more generic, and alert grouping becomes less helpful. These effects simulate the cognitive load that accumulates during sustained analytical work.
Social Effects
Increased noise in the Comms channel. Simulated colleagues send more messages, some of which are off-topic or low-priority. This mirrors the communication overload that real SOC teams experience during extended incidents.
Fatigue Analysis in Debrief
After your shift ends, the debrief report includes a dedicated fatigue analysis section:
- Hourly accuracy comparison -- A chart showing your triage accuracy broken down by hour, making it clear exactly when your performance began to decline
- Decision time trend -- How your average response time changed over the course of the shift
- Error pattern analysis -- Whether your mistakes in later hours were false negatives (missed threats) or false positives (over-escalation)
This data helps you identify your personal fatigue threshold and plan real-world shift strategies accordingly.
Why This Matters
SOC analyst burnout is one of the most cited problems in the cybersecurity industry. Analysts who have never experienced sustained triage pressure in a controlled environment are unprepared when they face it on the job. By exposing you to progressive fatigue effects during training, Shift Mode helps you:
- Recognize when your accuracy is dropping
- Develop personal strategies for maintaining focus
- Understand your effective working duration
- Make a stronger case for reasonable shift scheduling in your workplace
If you notice your accuracy dropping significantly in the debrief fatigue analysis, try shorter shifts and gradually increase duration. Building endurance is more effective than pushing through diminishing performance.