Identified the steps to contain, eradicate, and recover from an incident. Analyzed packets to interpret network communications. Understood basic syntax, components of signatures and logs in Intrusion Detection Systems (IDS) and Network Intrusion Detection Systems (NIDS) tools. Performed queries in Security Information and Event Management (SIEM) tools to investigate an event.