What Humna demonstrated

Built a beginner SOC incident workflow that triaged a phishing email, investigated anomalous authentication activity, mapped attacker behavior to the cyber kill chain, and selected a defensible containment sequence. The student also prioritized MFA as the highest-value control in the real-case analysis and produced a concise incident report that connected the phishing entry point to credential theft and internal exposure.

• Threat Triage and IOC Identification
• Log-Based Anomaly Detection
• Containment Sequencing and Prioritization
• Evidence-Based Incident Summarization