What Muhammad demonstrated

Built a complete beginner SOC incident workflow: triaged a phishing email, identified anomalous authentication activity including impossible travel, mapped observed events to the cyber kill chain, and selected a defensible containment sequence that cut access before destructive steps. Also drafted a GDPR Article 33 notification and a structured incident report with timeline, impact, and recommendations.

• Leakage-Free Incident Triage
• Evidence-Based Log Investigation
• Structured Incident Response Sequencing
• Practical Security Communication