What Al demonstrated

Built an end-to-end incident response workflow for a phishing-led breach: triaged the email indicators, traced the attacker through auth logs, mapped events to the kill chain, and chose a defensible containment sequence. Also drafted a GDPR-style 72-hour breach notification and summarized the incident for leadership with timeline, root cause, impact, and recommendations.

• Leakage-Free Threat Triage
• Log-Based Intrusion Investigation
• Containment Sequencing
• Incident Communication Under Compliance Constraints