At Cyber Potential, I manage security incidents from detection through resolution using Azure Sentinel and Microsoft Defender, and triage Splunk ES alerts from endpoint detection, IDS/IPS, and phishing sources.
I also lead investigations into email threats, helping mitigate phishing campaigns. In my cybersecurity projects, I used SPL to investigate suspicious Dropbox execution and correlate Windows file access, Microsoft 365 activity, and sign-ins; I also reduced Splunk vulnerability findings from 16 to 0 after upgrading Splunk Enterprise and verifying the fix with Nessus.
