What Ketty demonstrated

Built an end-to-end SOC incident response workflow for a phishing-led breach: triaged the email indicators, mapped observed events to the cyber kill chain, identified the anomalous sign-in, and chose containment actions that cut attacker access before destructive steps. Also drafted a GDPR Article 33 notification and tied the lessons to the public Continental case with a clear, evidence-based MFA recommendation.

• Leakage-Free Threat Triage
• Evidence-Based Log Investigation
• Incident Containment Sequencing
• Risk-Driven Executive Prioritization