Hands-on training sessions become a standard way to develop and increase knowledge in cybersecurity. As practical cybersecurity exercises are strongly process-oriented with knowledge-intensive processes, process mining techniques and models can help enhance learning analytics tools. The design of our open-source analytical dashboard is backed by guidelines for visualizing multivariate networks complemented with temporal views and clustering. The design aligns with the requirements for post-training analysis of a special subset of cybersecurity exercises -- supervised Capture the Flag games. Usability is demonstrated in a case study using trainees' engagement measurement to reveal potential flaws in training design or organization.
@article{arxiv.2509.15589,
title = {Process-Driven Visual Analysis of Cybersecurity Capture the Flag Exercises},
author = {Radek Ošlejšek and Radoslav Chudovský and Martin Macak},
journal= {arXiv preprint arXiv:2509.15589},
year = {2025}
}