Digital Forensics and Incident Response: Investigation, Evidence Preservation, and Timeline Reconstruction;

SOC AutoPilot — Autonomous AI security agent that reduces Splunk alert triage from 45 minutes to under 2 minutes. Uses Splunk MCP Server, Foundation-sec hosted model, and a self-learning knowledge base to investigate, classify, and generate detection rules for security incidents.

Static and dynamic malware analysis with IOC extraction, persistence analysis, and PCAP-based threat investigation.

Digital forensic investigation case study involving cross-device analysis (iOS & Windows), email artifact examination, metadata timeline reconstruction and incident threat assessment. All identifying data anonymized.

Agentic SOC platform for multi-agent security ops: vulnerability detection, knowledge graphs, team based parallel analysis, and GitHub integration.

Full-scope digital forensics investigation and incident response following a cyberattack at Premium House Lights, a fictional small business. The case includes discovery, log analysis, lateral movement tracing, and business-focused incident remediation recommendations.

Privacy-conscious security triage and evidence review for Windows and Linux.

Practical SOC L1/L2 incident response: LetsDefend write-ups, full IR reports and containment playbooks.