What Benny demonstrated

Built a complete beginner SOC incident response workflow: triaged a phishing email, identified anomalous sign-ins and IoCs from logs, mapped the attack to the cyber kill chain, and selected a defensible containment sequence. Also drafted a GDPR Article 33-style notification and a structured incident report with timestamps, impact, root cause, and recommendations.

• Leakage-Free Incident Triage
• Anomaly Detection from Auth Logs
• Sequencing Containment Actions
• Evidence-Based Security Communication