Selbstgesteuertes Projekt
Fundamentals of Cybersecurity
Cybersicherheit · Juli 2026
Eine ProoV-Fallstudie · Lernprojekt, kein Arbeitsverhältnis
Built a complete beginner SOC incident response workflow from phishing triage through containment and executive reporting. The work identified a malicious email, isolated the anomalous Rotterdam login as the compromise point, mapped events to kill-chain stages, and drafted a GDPR-style breach notification and incident summary grounded in the observed facts. The capstone also translated the real Continental case into a concrete control recommendation focused on exfiltration monitoring.
Bewertet nach
- Threat Triage & Detection20%
- Log Analysis & Investigation30%
- Incident Response & Containment20%
- Compliance & Breach Notification15%
- Executive Communication & Lessons15%
Bestanden · Bestehensgrenze 60/100
Was herausstach6
- Correctly identified the phishing email as malicious and caught 3 of 4 critical red flags without false positives.
- Flagged the impossible-travel login row and tied it to the compromise path instead of treating the alert as generic noise.
- Sequenced containment in a sensible order that cut access first and avoided destructive actions.
- Used the Continental case to justify egress/exfiltration monitoring with the concrete 40TB / 4-week dwell-time fact.
- Leakage-Free Threat Triage
- Anomaly-Driven Log Investigation
Meine eingereichte Arbeit18 Aufgaben
10 Aufgaben · 6.5k Zeichen · 8 Textantworten · 387 Wörter
- Phishing Triage188 Zeichen
- Killchain Map244 Zeichen
- Log Triage170 Zeichen
- Ioc Extraction176 Zeichen
- Containment Plan373 Zeichen
- Breach Notification1.5k Zeichen
- Incident Report2.1k Zeichen
- Recommendations649 Zeichen
- Real Case Analysis432 Zeichen
- Teach Back649 Zeichen
- Phishing Triage8 Wörter
- Killchain Map12 Wörter
- Log Triage9 Wörter
- Ioc Extraction8 Wörter
- Containment Plan14 Wörter
- Breach Notification165 Wörter
- Incident Report158 Wörter
- Recommendations13 Wörter
Bewusst zusammengefasst — der eingereichte Code und die Texte bleiben privat, damit diese Seite nicht als Lösungsvorlage dient. Die vollständige Einreichung steht hinter dem verifizierten Zertifikat.