What Riya demonstrated

Built a complete beginner SOC incident response workflow: mapped events to the cyber kill chain, identified anomalous authentication activity, selected sound containment actions, and wrote a structured incident report with timeline, root cause, impact, and recommendations. The submission shows practical reasoning about phishing-driven compromise and basic executive communication under incident-response constraints.

• Leakage-Free Incident Reasoning
• Anomalous Authentication Triage
• Containment Sequencing
• Security Communication