Comprehensive hands-on cybersecurity training program featuring real-world security simulations; led by subject matter experts● Configure security controls such as honeypots, data loss prevention, mail security, and Splunk SIEM to improve threat detection and optimize incident response time● Diagnose initial network security levels on Cisco devices by verifying ACLs, port assignments, and strong credential encryptions to ensure availability and integrity throughout the network● Initiate forensic investigation using SIFT Workstation and Flare VM; acquire threat data for analysis and preserved malware information using CAINE● Identify malicious content on infected machines using Zeek, as well as filtering techniques, and recommended corrective action

Created SIEM Lab using VirtualBox, Elastic, Windows Server 2012, client workstation as target, and Kali Linux as threat actor● Successfully identified threat machine on network by utilizing Elastic to examine logs in target machine● Applied proper security measures by verifying client integrity, logging threat, increasing credential requirements, and hardening port security to eliminate vulnerabilities from threat actor