Ashok A

SOC Analyst

Infosys Private Limited

Jan 2022 - Present

Monitoring the alerts in Qradar, Azure sentinel and Symantec DLP. Analyze the alerts, finding out the incident whether its legitimate or false positive or true positive incident. Doing the health checks in azure sentinel by using the tab of workbook. Monitoring and analyzing the incidents in Symantec DLP find out any data leakage in that mail, if any leakage found escalate issue to respective superior. Adding the IOCs in the Microsoft 365 defender. Also Analyze the alerts in Microsoft 365 defender. Generating the reports as per the client requirement daily & weekly. Analyze mails in shared mailbox, find out that mail is legitimate, spam or malicious mails. Completing the tasks before SLA. Track the incidents by using the SNOW ticketing tool Act as first level support for all Security Issues. Monitor SIEM alerts, analyze events in SIEM and raise Security incidents in Ticketing tool Manage Engine. Investigating security violations, attempts to gain unauthorized access, virus infections, etc. Coordinate responses to security incidents in a timely manner Worked with EDR tool like Microsoft Defender ATP (Advanced Threat Protection). Exposure to Documentation and Reporting Handling incidents/security alerts triggered from SIEM tool into Autotask (ticketing tool) Carrying out log monitoring and incident analysis for various devices such as Firewalls, IDS, IPS, database, web servers and so forth