What Wassim demonstrated

Built an end-to-end beginner SOC incident response workflow: triaged a phishing intrusion, identified anomalous sign-ins and IoCs from logs, mapped events to the cyber kill chain, and chose a sound containment sequence. Also drafted a GDPR Article 33-style breach notification and justified a high-impact control for the Continental case using public facts about initial access and exfiltration.

• Leakage-Free Incident Triage
• Evidence-Based Log Investigation
• Kill-Chain Reasoning
• Risk-Weighted Control Prioritization