Keyboard Shortcuts

The SOC Command Center is optimized for keyboard-driven operation. All critical triage actions are available without a mouse.

Navigation

Shortcut	Action
J / ↓	Next alert in list
K / ↑	Previous alert in list
Enter	Open selected alert detail
Escape	Close detail panel / dismiss modal
Tab	Move focus to next panel
Shift+Tab	Move focus to previous panel
G then D	Go to Dashboard
G then A	Go to Alert Feed
G then I	Go to Investigations
G then R	Go to Reports
G then S	Go to Settings

Alert Actions

Shortcut	Action
A	Acknowledge selected alert
E	Escalate selected alert
R	Resolve selected alert
X	Close as false positive
N	Add investigation note
L	Open linked logs
P	Open linked playbook
C	View AI system context
H	View alert history for this system
S	Suppress similar alerts (24h)

Filtering and Search

Shortcut	Action
/	Focus search input
F	Open filter panel
1	Filter by Critical severity
2	Filter by High severity
3	Filter by Medium severity
4	Filter by Low severity
0	Clear severity filter
U	Filter unacknowledged alerts only
M	Filter alerts assigned to me

View Controls

Shortcut	Action
V then C	Compact view (more alerts, less detail)
V then E	Expanded view (fewer alerts, full context)
V then F	Full-screen alert detail
D	Toggle dark/light mode
Z	Toggle sidebar
?	Show keyboard shortcut help
Ctrl+R	Refresh alert feed

Bulk Actions

Shortcut	Action
Space	Select / deselect alert
Ctrl+A	Select all visible alerts
Ctrl+E	Bulk escalate selected
Ctrl+X	Bulk close selected as false positive

Investigation Panel

Shortcut	Action
Alt+1	Evidence tab
Alt+2	Context tab
Alt+3	History tab
Alt+4	Notes tab
Alt+5	Playbooks tab
Ctrl+Enter	Submit investigation note
Ctrl+S	Save draft note

Tips for Speed

• Press ? at any time to see available shortcuts for the current view
• Most single-key shortcuts only fire when the alert list is focused (not in a text input)
• Chained shortcuts (e.g., G then D) have a 1-second window between keys
• Customize shortcuts in Settings > SOC > Keyboard Configuration