Self-directed project
Fundamentals of Cybersecurity
Cybersecurity · October 2026
A ProoV case study · educational project, not employment
Built a complete beginner SOC incident response workflow from phishing triage through log investigation, kill-chain mapping, containment, and GDPR breach notification. Demonstrated strong evidence-based judgment by identifying impossible-travel sign-ins, selecting a sound containment order, and recommending application control as the highest-impact mitigation for the real-world LockBit-style intrusion.
Graded against
- Threat Triage & Detection20%
- Log Analysis & Investigation30%
- Incident Response & Containment20%
- Compliance & Breach Notification15%
- Executive Communication & Lessons15%
Passed · pass mark 60/100
What stood out6
- Caught all four critical phishing red flags: sender, urgency, link, and attachment
- Identified the anomalous sign-ins and explicitly caught impossible travel
- Sequenced containment to cut access first by isolating the host before disabling the account and blocking IoCs
- Anchored the real-case recommendation on application control/allowlisting and tied it to the initial execution path
- Leakage-Free Threat Triage
- Evidence-Based Log Investigation
The work I submitted18 tasks
10 tasks · 6.8k characters · 8 written answers · 340 words
- Phishing Triage186 characters
- Killchain Map244 characters
- Log Triage175 characters
- Ioc Extraction176 characters
- Containment Plan373 characters
- Breach Notification1.1k characters
- Incident Report2.7k characters
- Recommendations648 characters
- Real Case Analysis641 characters
- Teach Back580 characters
- Phishing Triage8 words
- Killchain Map12 words
- Log Triage9 words
- Ioc Extraction8 words
- Containment Plan14 words
- Breach Notification127 words
- Incident Report149 words
- Recommendations13 words
Summarised on purpose — the submitted code and writing stay private so this page cannot be reused as an answer key. The full submission sits behind the verified certificate.