What ALi demonstrated

Built a complete beginner SOC incident response workflow from phishing triage through log investigation, kill-chain mapping, containment planning, and GDPR breach notification. The work correctly identified the phishing entry point, isolated anomalous authentication activity, extracted real indicators of compromise, and produced a structured incident report with practical control recommendations.

• Evidence-Based Threat Triage
• Log-Driven Incident Investigation
• Structured Incident Communication
• Control Prioritization