Insider Investigation Report · foyl SecIntel
INSIDER-001: Source Code Theft
Authorized Access Misuse · IRONMAN R&D Exfiltration · CASB + Identity Correlation
1 · Case Summary
Pending - select the statements the evidence supports
2 · Timeline of Events
Pending - reconstruct the pattern of behavior
3 · Evidence Handling
Pending - choose the actions that survive legal review
4 · Tradecraft Mapping
Pending - map each observation to its role in the theft
5 · Recommendations
Pending - choose defensible recommendations
6 · Analyst Assessment
Pending - written in your own words
Prepared by analyst on shift
foyl SecIntel ·