Saad Lili

During my internship, I focused on digital forensic investigations and playbook development as part of incident response processes. My main contributions included: - Conducted an in-depth study of the various aspects of digital forensics and the lifecycle of forensic investigations. - Developed an investigation methodology covering Windows, Linux, macOS, mobile, and network sources. - Created incident response playbooks integrating forensic procedures tailored to different types of attacks. - Performed a benchmark of forensic solutions available on the market and recommended suitable tools. - Designed and implemented a structured forensic environment including collection, analysis, and sandbox zones. - Produced deliverables (investigation reports, digital evidence) aligned with Moroccan and international legal frameworks.

During my internship, I focused on implementing and configuring a SIEM solution to enhance security monitoring and threat detection capabilities. My main contributions included: - Installed and configured the ELK Stack for centralized log management and analysis. - Designed and deployed Grafana dashboards to visualize and monitor security events in real time. - Configured real-time alerts to detect suspicious login attempts and abnormal activities.