Incident TriageAlert review, classification, escalation, documentation
Threat DetectionSuspicious activity, phishing indicators, brute-force behavior
Log AnalysisAuthentication logs, web logs, activity patterns, indicators
Network SecurityTCP/IP, DHCP, DNS, firewalls, routing and switching concepts
Packet AnalysisWireshark, Telnet, SSH, protocol comparison, traffic visibility
Security ToolsQualys, Packet Tracer, OpenSSL, Windows security controls, Splunk learning
Defensive AnalysisWeb attack patterns, authentication monitoring, phishing analysis
DocumentationCase notes, lab writeups, incident analysis, project evidence
Infrastructure SupportEnterprise support, troubleshooting, networks, systems, technical operations