What Kshitij demonstrated

Built a beginner SOC incident workflow that triaged a phishing intrusion, identified anomalous authentication activity, extracted actionable IOCs, and sequenced containment to cut access before taking broader remediation steps. Also drafted a GDPR Article 33 notification that covered the incident nature, affected data, likely consequences, and immediate mitigations, and connected the exercise to the public Continental case with a concrete control recommendation.

• Leakage-Free Triage and IOC Selection
• Anomalous Authentication Investigation
• Practical Containment Sequencing
• Evidence-Based Security Communication