/* SOC Dashboard Specific Styles */
    .soc-container {
        display: grid;
        grid-template-columns: 1fr;
        gap: 20px;
    }
    
    /* Threat Level Indicator */
    .threat-level-banner {
        background: linear-gradient(135deg, var(--bg-card) 0%, rgba(0,0,0,0.3) 100%);
        border: 1px solid var(--border-color);
        border-radius: var(--radius-lg);
        padding: 20px 32px;
        display: flex;
        align-items: center;
        justify-content: space-between;
        position: relative;
        overflow: hidden;
    }
    
    .threat-level-banner::before {
        content: '';
        position: absolute;
        top: 0;
        left: 0;
        right: 0;
        height: 4px;
        background: var(--threat-gradient);
        transition: all 0.5s;
    }
    
    .threat-level-banner.level-1::before { background: linear-gradient(90deg, #ef4444, #dc2626); }
    .threat-level-banner.level-2::before { background: linear-gradient(90deg, #f97316, #ea580c); }
    .threat-level-banner.level-3::before { background: linear-gradient(90deg, #eab308, #ca8a04); }
    .threat-level-banner.level-4::before { background: linear-gradient(90deg, #22c55e, #16a34a); }
    .threat-level-banner.level-5::before { background: linear-gradient(90deg, #06b6d4, #0891b2); }
    
    .threat-level-indicator {
        display: flex;
        align-items: center;
        gap: 20px;
    }
    
    .threat-gauge {
        width: 80px;
        height: 80px;
        position: relative;
    }
    
    .threat-gauge svg {
        width: 100%;
        height: 100%;
        transform: rotate(-90deg);
    }
    
    .threat-gauge .gauge-bg {
        fill: none;
        stroke: var(--bg-tertiary);
        stroke-width: 8;
    }
    
    .threat-gauge .gauge-fill {
        fill: none;
        stroke-width: 8;
        stroke-linecap: round;
        transition: stroke-dasharray 1s ease, stroke 0.5s;
    }
    
    .threat-gauge .gauge-fill.level-1 { stroke: #ef4444; }
    .threat-gauge .gauge-fill.level-2 { stroke: #f97316; }
    .threat-gauge .gauge-fill.level-3 { stroke: #eab308; }
    .threat-gauge .gauge-fill.level-4 { stroke: #22c55e; }
    .threat-gauge .gauge-fill.level-5 { stroke: #06b6d4; }
    
    .threat-level-text {
        text-align: left;
    }
    
    .threat-level-label {
        font-size: 12px;
        color: var(--text-muted);
        text-transform: uppercase;
        letter-spacing: 1px;
    }
    
    .threat-level-value {
        font-size: 28px;
        font-weight: 700;
        font-family: var(--font-mono);
        margin-top: 4px;
    }
    
    .threat-level-value.level-1 { color: #ef4444; }
    .threat-level-value.level-2 { color: #f97316; }
    .threat-level-value.level-3 { color: #eab308; }
    .threat-level-value.level-4 { color: #22c55e; }
    .threat-level-value.level-5 { color: #06b6d4; }
    
    /* SOC Stats Grid */
    .soc-stats {
        display: flex;
        gap: 24px;
    }
    
    .soc-stat {
        display: flex;
        align-items: center;
        gap: 12px;
        padding: 12px 20px;
        background: var(--bg-tertiary);
        border-radius: var(--radius-md);
        border: 1px solid var(--border-color);
    }
    
    .soc-stat-icon {
        width: 40px;
        height: 40px;
        border-radius: 10px;
        display: flex;
        align-items: center;
        justify-content: center;
        font-size: 16px;
    }
    
    .soc-stat-icon.danger { background: rgba(239, 68, 68, 0.15); color: var(--accent-danger); }
    .soc-stat-icon.warning { background: rgba(251, 191, 36, 0.15); color: var(--accent-warning); }
    .soc-stat-icon.info { background: rgba(0, 245, 212, 0.15); color: var(--accent-primary); }
    .soc-stat-icon.success { background: rgba(16, 185, 129, 0.15); color: var(--accent-success); }
    
    .soc-stat-value {
        font-size: 24px;
        font-weight: 700;
        font-family: var(--font-mono);
    }
    
    .soc-stat-label {
        font-size: 12px;
        color: var(--text-muted);
    }
    
    /* SLA Timer */
    .sla-timer {
        display: flex;
        align-items: center;
        gap: 8px;
        padding: 8px 16px;
        background: var(--bg-tertiary);
        border-radius: var(--radius-md);
        font-size: 13px;
    }
    
    .sla-timer .timer-value {
        font-family: var(--font-mono);
        font-weight: 600;
        color: var(--accent-success);
    }
    
    .sla-timer.warning .timer-value { color: var(--accent-warning); }
    .sla-timer.danger .timer-value { color: var(--accent-danger); }
    
    /* Main Grid Layout */
    .soc-main-grid {
        display: grid;
        grid-template-columns: 1fr 400px;
        gap: 20px;
    }
    
    .soc-left-column {
        display: flex;
        flex-direction: column;
        gap: 20px;
    }
    
    .soc-right-column {
        display: flex;
        flex-direction: column;
        gap: 20px;
    }
    
    /* Live Attack Map */
    #soc-attack-map {
        height: 350px;
        width: 100%;
        border-radius: 0 0 var(--radius-lg) var(--radius-lg);
        background: linear-gradient(135deg, #0a1929 0%, #071421 100%);
        position: relative;
        z-index: 1;
    }
    
    .leaflet-container {
        background: transparent !important;
        font-family: inherit;
    }
    
    .leaflet-control-zoom {
        border: none !important;
        border-radius: var(--radius-md) !important;
        overflow: hidden;
    }
    
    .leaflet-control-zoom a {
        background: var(--bg-card) !important;
        color: var(--text-primary) !important;
        border: 1px solid var(--border-color) !important;
    }
    
    .leaflet-control-zoom a:hover {
        background: var(--bg-hover) !important;
    }
    
    .leaflet-popup-content-wrapper {
        background: var(--bg-card);
        color: var(--text-primary);
        border-radius: var(--radius-md);
        border: 1px solid var(--border-color);
    }
    
    .leaflet-popup-tip {
        background: var(--bg-card);
    }
    
    /* Attack flow animation */
    @keyframes flowPulse {
        0%, 100% { opacity: 0.3; }
        50% { opacity: 1; }
    }
    
    /* Heatmap Container */
    .heatmap-container {
        padding: 12px;
        overflow-x: auto;
    }
    
    .heatmap-grid {
        display: grid;
        grid-template-columns: 32px repeat(24, 1fr);
        gap: 1px;
        font-size: 9px;
        min-width: 320px;
    }
    
    .heatmap-header {
        text-align: center;
        color: var(--text-muted);
        padding: 2px 0;
        font-size: 8px;
    }
    
    .heatmap-row-label {
        display: flex;
        align-items: center;
        justify-content: flex-end;
        padding-right: 4px;
        color: var(--text-muted);
        font-size: 9px;
    }
    
    .heatmap-cell {
        aspect-ratio: 1;
        border-radius: 2px;
        background: var(--bg-secondary);
        cursor: pointer;
        transition: all 0.2s;
        min-height: 12px;
        min-width: 10px;
    }
    
    .heatmap-cell:hover {
        transform: scale(1.3);
        z-index: 10;
    }
    
    .heatmap-cell.level-0 { background: var(--bg-secondary); }
    .heatmap-cell.level-1 { background: rgba(16, 185, 129, 0.4); }
    .heatmap-cell.level-2 { background: rgba(251, 191, 36, 0.5); }
    .heatmap-cell.level-3 { background: rgba(249, 115, 22, 0.6); }
    .heatmap-cell.level-4 { background: rgba(239, 68, 68, 0.8); }
    
    /* Active Incidents Panel */
    .incident-list {
        max-height: 400px;
        overflow-y: auto;
    }
    
    .incident-item {
        display: flex;
        align-items: flex-start;
        gap: 12px;
        padding: 14px 16px;
        border-bottom: 1px solid var(--border-color);
        transition: background 0.2s;
        cursor: pointer;
    }
    
    .incident-item:hover {
        background: var(--bg-hover);
    }
    
    .incident-item:last-child {
        border-bottom: none;
    }
    
    .incident-severity {
        width: 8px;
        height: 8px;
        border-radius: 50%;
        flex-shrink: 0;
        margin-top: 6px;
        animation: severityPulse 2s infinite;
    }
    
    .incident-severity.critical { background: #ef4444; box-shadow: 0 0 10px #ef4444; }
    .incident-severity.high { background: #f97316; box-shadow: 0 0 8px #f97316; }
    .incident-severity.medium { background: #eab308; }
    .incident-severity.low { background: #22c55e; }
    
    @keyframes severityPulse {
        0%, 100% { opacity: 1; }
        50% { opacity: 0.5; }
    }
    
    .incident-content {
        flex: 1;
        min-width: 0;
    }
    
    .incident-title {
        font-weight: 500;
        font-size: 13px;
        white-space: nowrap;
        overflow: hidden;
        text-overflow: ellipsis;
    }
    
    .incident-meta {
        font-size: 11px;
        color: var(--text-muted);
        margin-top: 4px;
    }
    
    .incident-time {
        font-size: 11px;
        color: var(--text-muted);
        white-space: nowrap;
    }
    
    /* Top Attackers */
    .attacker-item {
        display: flex;
        align-items: center;
        gap: 12px;
        padding: 12px 16px;
        border-bottom: 1px solid var(--border-color);
    }
    
    .attacker-item:last-child {
        border-bottom: none;
    }
    
    .attacker-rank {
        width: 24px;
        height: 24px;
        border-radius: 6px;
        background: var(--bg-tertiary);
        display: flex;
        align-items: center;
        justify-content: center;
        font-size: 11px;
        font-weight: 600;
        color: var(--text-muted);
    }
    
    .attacker-rank.top-3 {
        background: linear-gradient(135deg, var(--accent-danger), #f97316);
        color: white;
    }
    
    .attacker-info {
        flex: 1;
        min-width: 0;
    }
    
    .attacker-ip {
        font-family: var(--font-mono);
        font-size: 13px;
        font-weight: 500;
    }
    
    .attacker-location {
        font-size: 11px;
        color: var(--text-muted);
        display: flex;
        align-items: center;
        gap: 4px;
    }
    
    .attacker-count {
        font-family: var(--font-mono);
        font-size: 14px;
        font-weight: 600;
        color: var(--accent-danger);
    }
    
    /* MITRE ATT&CK */
    .mitre-grid {
        display: flex;
        flex-wrap: wrap;
        gap: 8px;
        padding: 12px;
    }
    
    .mitre-technique {
        padding: 6px 12px;
        background: var(--bg-tertiary);
        border: 1px solid var(--border-color);
        border-radius: var(--radius-sm);
        font-size: 11px;
        display: flex;
        align-items: center;
        gap: 6px;
        cursor: pointer;
        transition: all 0.2s;
    }
    
    .mitre-technique:hover {
        border-color: var(--accent-primary);
        background: rgba(0, 245, 212, 0.1);
    }
    
    .mitre-technique .count {
        background: var(--accent-danger);
        color: white;
        padding: 2px 6px;
        border-radius: 10px;
        font-size: 10px;
        font-weight: 600;
    }
    
    /* Live Feed */
    .live-feed {
        max-height: 300px;
        overflow-y: auto;
        background: var(--bg-tertiary);
        border-radius: var(--radius-md);
    }
    
    .feed-item {
        display: flex;
        align-items: center;
        gap: 10px;
        padding: 10px 14px;
        border-bottom: 1px solid var(--border-color);
        font-size: 12px;
        animation: feedSlide 0.3s ease;
    }
    
    @keyframes feedSlide {
        from { opacity: 0; transform: translateX(-20px); }
        to { opacity: 1; transform: translateX(0); }
    }
    
    .feed-item.threat {
        border-left: 3px solid #f72585;
        background: rgba(247, 37, 133, 0.05);
    }
    
    .feed-item.blocked {
        border-left: 3px solid var(--accent-danger);
    }
    
    .feed-icon {
        width: 24px;
        height: 24px;
        border-radius: 6px;
        display: flex;
        align-items: center;
        justify-content: center;
        font-size: 10px;
        flex-shrink: 0;
    }
    
    .feed-icon.threat { background: rgba(247, 37, 133, 0.15); color: #f72585; }
    .feed-icon.blocked { background: rgba(239, 68, 68, 0.15); color: var(--accent-danger); }
    .feed-icon.vpn { background: rgba(123, 97, 255, 0.15); color: var(--accent-secondary); }
    
    .feed-content {
        flex: 1;
        min-width: 0;
    }
    
    .feed-title {
        font-family: var(--font-mono);
        font-size: 11px;
        white-space: nowrap;
        overflow: hidden;
        text-overflow: ellipsis;
    }
    
    .feed-meta {
        font-size: 10px;
        color: var(--text-muted);
    }
    
    .feed-time {
        font-size: 10px;
        color: var(--text-muted);
        white-space: nowrap;
    }
    
    /* Protocol Sunburst */
    .protocol-chart-container {
        height: 250px;
        display: flex;
        align-items: center;
        justify-content: center;
    }
    
    /* Port Treemap */
    .port-treemap {
        display: grid;
        grid-template-columns: repeat(5, 1fr);
        gap: 4px;
        padding: 12px;
    }
    
    .treemap-item {
        background: var(--bg-tertiary);
        border: 1px solid var(--border-color);
        border-radius: var(--radius-sm);
        padding: 12px;
        text-align: center;
        cursor: pointer;
        transition: all 0.2s;
    }
    
    .treemap-item:hover {
        border-color: var(--accent-primary);
        transform: scale(1.05);
    }
    
    .treemap-item .port {
        font-family: var(--font-mono);
        font-size: 16px;
        font-weight: 600;
        color: var(--text-primary);
    }
    
    .treemap-item .service {
        font-size: 10px;
        color: var(--text-muted);
        margin-top: 2px;
    }
    
    .treemap-item .count {
        font-size: 11px;
        color: var(--accent-danger);
        margin-top: 4px;
    }
    
    /* Responsive */
    @media (max-width: 1400px) {
        .soc-main-grid {
            grid-template-columns: 1fr;
        }
        
        .soc-right-column {
            display: grid;
            grid-template-columns: repeat(2, 1fr);
        }
    }
    
    @media (max-width: 1024px) {
        .soc-stats {
            flex-wrap: wrap;
        }
        
        .threat-level-banner {
            flex-direction: column;
            gap: 16px;
            text-align: center;
        }
        
        .soc-right-column {
            grid-template-columns: 1fr;
        }
    }
    
    /* Live indicator */
    .live-badge {
        display: inline-flex;
        align-items: center;
        gap: 6px;
        padding: 4px 10px;
        background: rgba(239, 68, 68, 0.15);
        border-radius: 20px;
        font-size: 11px;
        color: var(--accent-danger);
    }
    
    .live-badge .dot {
        width: 6px;
        height: 6px;
        background: var(--accent-danger);
        border-radius: 50%;
        animation: liveDot 1s infinite;
    }
    
    @keyframes liveDot {
        0%, 100% { opacity: 1; }
        50% { opacity: 0.3; }
    }
    
    /* User & Connection Lists */
    .user-list, .connection-list, .vpn-list {
        max-height: 350px;
        overflow-y: auto;
    }
    
    .user-item, .connection-item, .vpn-item {
        display: flex;
        align-items: center;
        gap: 12px;
        padding: 12px 16px;
        border-bottom: 1px solid var(--border-color);
        transition: background 0.2s;
    }
    
    .user-item:hover, .connection-item:hover, .vpn-item:hover {
        background: var(--bg-hover);
    }
    
    .user-item:last-child, .connection-item:last-child, .vpn-item:last-child {
        border-bottom: none;
    }
    
    .user-avatar {
        width: 36px;
        height: 36px;
        border-radius: 50%;
        background: linear-gradient(135deg, var(--accent-primary), var(--accent-secondary));
        display: flex;
        align-items: center;
        justify-content: center;
        font-size: 14px;
        font-weight: 600;
        color: white;
        flex-shrink: 0;
    }
    
    .user-info, .connection-info, .vpn-info {
        flex: 1;
        min-width: 0;
    }
    
    .user-name, .connection-id {
        font-weight: 500;
        font-size: 13px;
    }
    
    .user-meta, .connection-meta, .vpn-meta {
        font-size: 11px;
        color: var(--text-muted);
        display: flex;
        align-items: center;
        gap: 8px;
        margin-top: 2px;
    }
    
    .status-badge {
        display: inline-flex;
        align-items: center;
        gap: 4px;
        padding: 2px 8px;
        border-radius: 12px;
        font-size: 10px;
        font-weight: 600;
        text-transform: uppercase;
    }
    
    .status-badge.online {
        background: rgba(16, 185, 129, 0.15);
        color: var(--accent-success);
    }
    
    .status-badge.offline {
        background: rgba(156, 163, 175, 0.15);
        color: var(--text-muted);
    }
    
    .status-badge.connected {
        background: rgba(0, 245, 212, 0.15);
        color: var(--accent-primary);
    }
    
    .status-badge.failed {
        background: rgba(239, 68, 68, 0.15);
        color: var(--accent-danger);
    }
    
    .status-dot {
        width: 6px;
        height: 6px;
        border-radius: 50%;
        background: currentColor;
        animation: statusPulse 2s infinite;
    }
    
    @keyframes statusPulse {
        0%, 100% { opacity: 1; }
        50% { opacity: 0.4; }
    }
    
    .protocol-badge {
        padding: 2px 6px;
        background: var(--bg-tertiary);
        border-radius: 4px;
        font-family: var(--font-mono);
        font-size: 10px;
        font-weight: 600;
    }
    
    .duration-text {
        font-family: var(--font-mono);
        font-size: 11px;
        color: var(--accent-primary);
    }
    
    /* Glassmorphism cards */
    .glass-card {
        background: linear-gradient(135deg, rgba(20, 28, 47, 0.9) 0%, rgba(10, 14, 23, 0.95) 100%);
        backdrop-filter: blur(10px);
        border: 1px solid rgba(255, 255, 255, 0.1);
    }
    
    .glass-card:hover {
        border-color: rgba(0, 245, 212, 0.3);
        box-shadow: 0 0 30px rgba(0, 245, 212, 0.1);
    }
    
    /* Map Card specific styling */
    .glass-card:has(#soc-attack-map) {
        overflow: hidden;
    }
    
    .glass-card:has(#soc-attack-map) .card-header {
        position: relative;
        z-index: 10;
        background: linear-gradient(180deg, rgba(20, 28, 47, 0.95) 0%, rgba(20, 28, 47, 0.8) 100%);
    }
    
    /* Map markers pulse animation */
    @keyframes markerPulse {
        0% { transform: scale(1); opacity: 1; }
        50% { transform: scale(1.3); opacity: 0.7; }
        100% { transform: scale(1); opacity: 1; }
    }
    
    /* Attack line animation */
    @keyframes dashOffset {
        to { stroke-dashoffset: -20; }
    }
    
    .leaflet-interactive {
        transition: transform 0.2s, fill-opacity 0.2s;
    }
    
    .leaflet-interactive:hover {
        transform: scale(1.1);
    }

/* SOC status bar + panel messages */
.soc-status-bar {
    display: none;
    align-items: center;
    justify-content: space-between;
    gap: 12px;
    flex-wrap: wrap;
    padding: 10px 16px;
    margin-bottom: 16px;
    border-radius: var(--radius-md);
    border: 1px solid var(--border-color);
    background: var(--bg-tertiary);
    font-size: 13px;
}

.soc-status-bar.is-visible {
    display: flex;
}

.soc-status-bar.is-error {
    border-color: rgba(239, 68, 68, 0.45);
    background: rgba(239, 68, 68, 0.1);
    color: var(--text-primary);
}

.soc-status-bar.is-ok {
    border-color: rgba(16, 185, 129, 0.4);
    background: rgba(16, 185, 129, 0.08);
}

.soc-status-bar.is-loading {
    border-color: rgba(0, 245, 212, 0.35);
    background: rgba(0, 245, 212, 0.06);
}

#soc-status-text {
    flex: 1;
    min-width: 0;
}

.soc-panel-msg {
    text-align: center;
    padding: 24px;
    color: var(--text-muted);
}

.soc-panel-msg > i {
    font-size: 28px;
    margin-bottom: 10px;
    opacity: 0.55;
    display: block;
}

.soc-panel-msg .soc-msg-title {
    font-size: 13px;
    font-weight: 600;
    color: var(--text-primary);
    margin-bottom: 6px;
}

.soc-panel-msg .soc-msg-detail {
    font-size: 12px;
    line-height: 1.45;
}

.soc-ingestion-bar {
    margin-top: 10px;
    margin-bottom: 4px;
    padding: 10px 14px;
    border-radius: var(--radius-md);
    border: 1px solid var(--border-color);
    background: var(--bg-card);
    font-size: 12px;
    line-height: 1.5;
}

.soc-ingestion-bar .soc-ingestion-row {
    display: flex;
    flex-wrap: wrap;
    align-items: flex-start;
    gap: 10px 16px;
}

.soc-ingestion-bar .soc-ingestion-chips {
    display: flex;
    flex-wrap: wrap;
    gap: 8px;
    align-items: center;
}

.soc-ingestion-bar .soc-chip {
    display: inline-flex;
    align-items: center;
    gap: 6px;
    padding: 4px 10px;
    border-radius: 999px;
    background: var(--bg-tertiary);
    border: 1px solid var(--border-color);
    color: var(--text-primary);
    white-space: nowrap;
}

.soc-ingestion-bar .soc-chip.is-ok {
    border-color: rgba(16, 185, 129, 0.45);
    background: rgba(16, 185, 129, 0.08);
}

.soc-ingestion-bar .soc-chip.is-warn {
    border-color: rgba(251, 191, 36, 0.5);
    background: rgba(251, 191, 36, 0.1);
}

.soc-ingestion-bar .soc-chip.is-bad {
    border-color: rgba(239, 68, 68, 0.45);
    background: rgba(239, 68, 68, 0.1);
}

.soc-ingestion-bar .soc-ingestion-hints {
    margin-top: 8px;
    padding-top: 8px;
    border-top: 1px solid var(--border-color);
    color: var(--text-muted);
    font-size: 11px;
}

.soc-ingestion-bar .soc-ingestion-hints li {
    margin: 4px 0 0 18px;
    list-style: disc;
}

.soc-ingestion-bar .soc-ingestion-hints .hint-warn {
    color: var(--accent-warning, #fbbf24);
}

.soc-ingestion-bar .soc-ingestion-hints .hint-info {
    color: var(--text-muted);
}