What George demonstrated

Built a complete beginner SOC incident workflow: identified a phishing intrusion, mapped observed events to the cyber kill chain, triaged anomalous authentication activity including impossible travel, and selected MFA as the most effective control for the real-world case. Also drafted a GDPR breach notification and executive incident summary, showing practical incident-response communication skills.

• Leakage-Free Incident Triage
• Kill-Chain Mapping
• Anomaly Detection in Auth Logs
• Control Prioritization