What Milan demonstrated

Built an end-to-end incident response workflow for a phishing-led breach: triaged the email, traced the intrusion through logs, mapped the attack to kill-chain stages, selected defensible containment actions, and drafted a GDPR Article 33 notification. In the capstone, he/she argued convincingly for phishing-resistant MFA as the highest-impact control, tying the recommendation to the attacker’s credential-reuse path and multi-week dwell time.

• Leakage-Free Threat Triage
• Log-Based Intrusion Investigation
• Containment Sequencing
• Evidence-Based Security Communication