Investigated cybersecurity incidents involving web defacement, NTLM relay attacks, privilege escalation, and lateral movement using SIEM, NIDS, and EDR. Analyzed security logs, reconstructed attack...