Post Intrusion Ransomware

Post Intrusion Ransomware Incident layout

Ransomware Incident

Details

IDPost Intrusion Ransomware
Groupincident
Version-1
From Version6.0.0

Layout Structure

Incident Info 9 sections

Case Details

Field IDPosition
type Col 0-2, Height: 24
severity Col 0-2, Height: 24
owner Col 0-2, Height: 24
dbotsource Col 0-2, Height: 24
sourcebrand Col 0-2, Height: 24
sourceinstance Col 0-2, Height: 24
playbookid Col 0-2, Height: 24

Notes

Work Plan

Linked Incidents

Child Incidents

Team Members

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 24
dbotmodified Col 0-1, Height: 24
dbotduedate Col 0-2, Height: 24
dbotcreated Col 1-2, Height: 24
dbotclosed Col 1-2, Height: 24

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 24
closereason Col 0-2, Height: 24
closenotes Col 0-2, Height: 24

Evidence

Post Intrusion Ransomware 5 sections

Ransomware Details

Field IDPosition
occurred Col 0-2, Height: 53
ransomwarerecoverytool Col 0-2, Height: 53
ransomwareencryptedfileowner Col 0-2, Height: 53
ransomwareapproximatenumberofencryptedendpoints Col 0-2, Height: 53
ransomwarestrain Col 0-2, Height: 53
ransomwaredataencryptionstatus Col 2-4, Height: 53
ransomwarecryptocurrencyaddress Col 2-4, Height: 53
ransomwarecryptocurrencyaddresstype Col 2-4, Height: 53
ransomwareonionaddress Col 2-4, Height: 53
ransomwareemail Col 2-4, Height: 53

Ransomware Data Encryption Status

Ransomware Host Count

Indicators

Ransomware Note

War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.