What Hiba demonstrated

Built an end-to-end SOC incident response narrative from phishing triage through containment and reporting. Demonstrated strong analytical judgment by tying the intrusion to concrete log evidence, mapping it to the cyber kill chain, drafting a GDPR Article 33 notice, and recommending practical controls such as MFA, least privilege, and application control. Also transferred the lesson to the Continental case by arguing, with clear reasoning, why MFA would have most reduced the damage.

• Leakage-Free Incident Reasoning
• Evidence-Based Log Investigation
• Defensible Containment Sequencing
• Executive Security Communication