Live document - sections fill in as you complete them
Confidential // TLP:AMBER // Procurement & Finance eyes only
Incident Response Report · foyl SecIntel
VF-001: Vendor Fraud
Homoglyph Domain · Fraudulent Invoice INV-2026-0847 · Altered Bank Details
Report ID
RPT-2026-VF-001
Email Threat
THREAT-003
Fraudulent Domain
acme-industr1al.com
Legitimate Domain
acme-industrial.com
Severity
-
Status
-
Incident Type
-
Invoice Amount
$23,847 USD
1 · Fraud Signals
Pending - separate the real detection signals from noise
2 · Timeline of Events
Pending - reconstruct registration to closure
3 · Vendor Verification
Pending - choose the verification actions that hold up
4 · MITRE ATT&CK Mapping
Pending - map observed techniques to tactics
5 · Recommendations
Pending - choose defensible recommendations
6 · Analyst Assessment
Pending - written in your own words
Prepared by analyst on shift foyl SecIntel ·
Report filed
VF-001 - Incident Report
All reports