Conducted a full phishing email investigation using VirusTotal, Google Workspace headers, and MITRE ATT&CK mapping. Analyzed malicious attachments, extracted IoCs (domains, IPs, and hashes), and documented findings using a structured incident report format. Demonstrates skills in threat detection, malware analysis, and security documentation.