Self-directed project
Fundamentals of Cybersecurity
Cybersecurity · September 2026
A ProoV case study · educational project, not employment
Built an end-to-end incident response analysis for a phishing-led LockBit intrusion: triaged the email, identified anomalous sign-ins, mapped the attack to the cyber kill chain, and sequenced containment actions to cut access quickly. Also drafted a GDPR breach notification and translated the incident into a clear executive report grounded in concrete evidence, including the 40TB exfiltration and the 72-hour reporting clock.
Graded against
- Threat Triage & Detection20%
- Log Analysis & Investigation30%
- Incident Response & Containment20%
- Compliance & Breach Notification15%
- Executive Communication & Lessons15%
Passed · pass mark 60/100
What stood out6
- Correctly identified the phishing intrusion and caught 3 of 4 critical email red flags with no false positives.
- Found the impossible-travel sign-in and tied it to the attacker’s access path and subsequent exfiltration.
- Mapped all five observed events to the correct cyber kill chain stages.
- Produced a concise GDPR Article 33 notification covering nature, scope, consequences, and mitigations.
- Leakage-Free Incident Investigation
- Evidence-Based Threat Triage
The work I submitted18 tasks
10 tasks · 5.9k characters · JavaScript · 8 written answers · 268 words
- Phishing Triage190 characters
- Killchain Map244 characters
- Log Triage190 characters
- Ioc Extraction176 characters
- Containment Plan373 characters
- Breach Notification470 characters
- Incident ReportJavaScript · 1.8k characters
- Recommendations648 characters
- Real Case Analysis1.4k characters
- Teach Back452 characters
- Phishing Triage8 words
- Killchain Map12 words
- Log Triage9 words
- Ioc Extraction8 words
- Containment Plan14 words
- Breach Notification44 words
- Incident Report160 words
- Recommendations13 words
Summarised on purpose — the submitted code and writing stay private so this page cannot be reused as an answer key. The full submission sits behind the verified certificate.