What AYA demonstrated

Built a complete beginner SOC incident response workflow from phishing triage through log investigation, kill-chain mapping, containment, and GDPR notification. Demonstrated evidence-based reasoning by tying the compromise to a lookalike sender, malicious attachment, impossible-travel login, finance-share access, and a clear 72-hour reporting obligation. Also translated the same method to the public Continental case and justified MFA as the highest-value control.

• Leakage-Free Incident Triage
• Evidence-Based Log Investigation
• Kill-Chain Mapping and Containment Sequencing
• Regulatory Breach Communication