What Harsh demonstrated

Built an end-to-end incident response workflow for a phishing-led breach: triaged the email indicators, identified anomalous authentication activity, mapped the attack to kill-chain stages, and chose a containment sequence that cut access before remediation. Also drafted a GDPR Art. 33 notification and translated the method to the public Continental LockBit case with a concrete control recommendation grounded in the ~40 TB exfiltration impact.

• Leakage-Free Incident Triage
• Evidence-Based Log Investigation
• Kill-Chain Mapping and Containment Sequencing
• Risk-Aware Security Communication