Self-directed project
Fundamentals of Cybersecurity
Cybersecurity · September 2026
A ProoV case study · educational project, not employment
Built an end-to-end SOC incident response workflow for a phishing-led breach: triaged the email indicators, identified anomalous authentication activity, mapped events to the cyber kill chain, and selected a containment sequence that prioritized cutting attacker access. Also drafted a GDPR Article 33 notification and an executive incident report with practical controls, including MFA and least privilege.
Graded against
- Threat Triage & Detection20%
- Log Analysis & Investigation30%
- Incident Response & Containment20%
- Compliance & Breach Notification15%
- Executive Communication & Lessons15%
Passed · pass mark 60/100
What stood out6
- Caught all four critical phishing red flags with no false positives
- Flagged the impossible-travel authentication anomaly and selected the real IOCs to block
- Chose a containment order that cut access first and avoided destructive actions
- Recommended MFA as the highest-ROI control in the Continental case
- Leakage-Free Threat Triage
- Evidence-Based Incident Investigation
The work I submitted18 tasks
10 tasks · 4.6k characters · 8 written answers · 288 words
- Phishing Triage186 characters
- Killchain Map244 characters
- Log Triage190 characters
- Ioc Extraction176 characters
- Containment Plan373 characters
- Breach Notification682 characters
- Incident Report1.1k characters
- Recommendations648 characters
- Real Case Analysis540 characters
- Teach Back383 characters
- Phishing Triage8 words
- Killchain Map12 words
- Log Triage9 words
- Ioc Extraction8 words
- Containment Plan14 words
- Breach Notification86 words
- Incident Report138 words
- Recommendations13 words
Summarised on purpose — the submitted code and writing stay private so this page cannot be reused as an answer key. The full submission sits behind the verified certificate.