What Muhammad demonstrated

Built a beginner SOC incident response workflow that correctly triaged a phishing email, extracted and blocked the relevant indicators of compromise, and chose a sound containment sequence that cut access before destructive actions. Also produced a structured incident report and a concise teach-back explaining lateral movement and privilege escalation in practical terms.

• Phishing Triage and IOC Identification
• Incident Containment Sequencing
• Security Communication and Teach-Back