What Mehween demonstrated

Built a coherent phishing-to-breach investigation: identified the malicious email indicators, detected the impossible-travel account takeover in logs, selected the relevant IoCs, and drafted a GDPR Article 33 notification with the incident scope and mitigations. The final report and control recommendations were clear, prioritized, and tied to the facts of the case, including the finance-share exposure and the value of MFA.

• Leakage-Free Incident Triage
• Log-Based Anomaly Detection
• Structured Incident Communication