What Ashlesh demonstrated

Built a complete beginner SOC incident workflow: triaged a phishing email, identified anomalous authentication activity including impossible travel, extracted the key IOCs, and ordered containment actions to cut access before remediation. Also drafted a GDPR Article 33 notification and explained why application allowlisting would have reduced damage in the Continental case by stopping malicious execution at the endpoint.

• Leakage-Free Triage and IOC Identification
• Anomalous Authentication Investigation
• Containment Prioritization
• Evidence-Based Security Communication