What Swastik demonstrated

Built a beginner SOC incident response workflow end to end: triaged a phishing email, identified anomalous authentication activity including impossible travel, selected the relevant IOCs, and sequenced containment to cut access before taking broader action. Also produced a structured breach notification and incident report that connected the phishing entry point to the account compromise and data exposure.

• Leakage-Free Threat Triage
• Anomalous Login Investigation
• Containment Sequencing
• Security Incident Communication