Incident Response Report · foyl SecIntel
BEC-001: CEO Wire Fraud
CEO Impersonation · Personal Gmail Display-Name Spoof · $47,500 Wire Transfer Attempt
1 · Executive Summary
Pending - select the accurate summary statements
2 · Timeline of Events
Pending - reconstruct the detection and response
3 · Verification & Containment
Pending - choose the defensible response actions
4 · MITRE ATT&CK Mapping
Pending - map observed techniques to tactics
5 · Recommendations
Pending - choose defensible recommendations
6 · Analyst Assessment
Pending - written in your own words
Prepared by analyst on shift
foyl SecIntel ·