Monitoring the events, Log analysis and Investigate incident on a daily basis.Investigate Incidents by exporting the logs from Qradar.Analyze the triggered event is true positive or false positive by observing the base event and monitor last 24 or 48 hrs logs related to the triggered event.Creating the incident in Service now ticketing tool after the event triggered in the Real-time monitoring channel.Monitoring the Cases from SOAR Platform (Siemplify) which are ingesting from the SIEM(Qradar).Having experience in the alert handling life cycle ( How to respond the alerts when it is triggered) by monitoring the SOAR platform.Create the incident by running the playbook in SOAR platform when alert got triggered and follow-up with the respective team until the incident closure.I have involved in the searching of IOCs and extracted the logs based on Adhoc request and if any results found create the incident and assign to the respective team to block.Checking the DSR daily and report to the respective team if any of the log sources are not sending the logs to SIEM.Working in 24x7 Operational support.

Monitoring the events, Log analysis and Investigate incident on a daily basis.Investigate Incidents using Channels and Dashboards.Analyze the triggered event is true positive or false positive by observing the base event and monitor last 24 or 48 hrs logs related to the triggered event.Creating the incident in Service now ticketing tool after the event triggered in the Real-time monitoring channel.Knowledge in troubleshooting the Log Stoppage issue of different devices.Working in 24x7 Operational support.