At Cyber One Solutions, I support Windows endpoints and Microsoft 365, Entra ID, and Active Directory accounts. I review routine endpoint security alerts, document findings, and escalate issues beyond my assigned authority.
In TryHackMe SOC Labs, I correlated endpoint, firewall, and URL-analysis evidence to investigate a blacklisted-URL alert and verify that the outbound request was blocked. I also used Splunk and Sysmon to investigate process alerts, document false-positive dispositions, and support closure without escalation.
Through the Infosec Cybersecurity Intensive Bootcamp, I investigated simulated malware and web attacks using Splunk, Sysmon, and network logs. I documented vulnerabilities and remediation recommendations, then performed follow-up testing and monitoring to validate changes.
