What Ahmed demonstrated

Built an end-to-end incident response analysis for a phishing-led breach: triaged the email indicators, traced anomalous logins and attack progression, mapped the activity to the cyber kill chain, and selected a containment sequence that cut access before destructive actions. Also drafted a GDPR Article 33 notification and justified application control as the highest-impact safeguard in the Continental case using public facts.

• Leakage-Free Threat Triage
• Anomalous Log Investigation
• Structured Incident Response Sequencing
• Risk-Based Control Prioritization