Log Analysis, Threat Hunting, Security Controls, Network Protocols, Incident Response, Operating Systems, Digital Forensics, SOAR automation frameworks, incident post-mortem reporting, playbook automation, threat intelligence integration, malware triage, packet inspection, documentation and reporting