Live document - sections fill in as you complete them
Confidential // TLP:AMBER // foyl SecIntel internal
Incident Response Report · foyl SecIntel
Operation IRON CHIMNEY
AiTM Session Theft · Lateral Movement · C2 Exfiltration · Ransomware Impact
Report ID
RPT-2026-0087
SIEM Investigation
INV-2024-0087
SOAR Case
CASE-2024-0267
Severity
-
Status
-
Incident Type
-
1 · Executive Summary
Pending - select the accurate summary statements
2 · Timeline of Events
Pending - reconstruct the attack timeline
3 · IOC Inventory
Pending - separate indicators from victims
4 · MITRE ATT&CK Mapping
Pending - map observed techniques to tactics
5 · Recommendations
Pending - choose defensible recommendations
Prepared by analyst on shift foyl SecIntel ·
Report filed
IRON CHIMNEY - Incident Report
All reports