What Ali demonstrated

Built a complete beginner SOC incident workflow: triaged a phishing email, identified the anomalous login and IoCs from logs, mapped the attack to the cyber kill chain, and chose a defensible containment sequence. Also drafted a GDPR breach notification and an executive incident report that tied the incident timeline to the 72-hour reporting clock and practical remediation steps.

• Leakage-Free Threat Triage
• Anomalous Login Investigation
• Containment Sequencing
• Security Communication