# Velociraptor IR Collection Report Template

## Case Information
| Field | Details |
|-------|---------|
| Case ID | |
| Velociraptor Server | |
| Collection Start | |
| Collection End | |
| Lead Analyst | |
| Endpoints Targeted | |
| Endpoints Collected | |

## Collection Scope
### Target Endpoints
| Hostname | IP Address | OS | Client ID | Status |
|----------|-----------|-----|-----------|--------|
| | | | | |

### Artifacts Collected
| Artifact | Description | Endpoints | Events |
|----------|-------------|-----------|--------|
| Windows.EventLogs.EvtxHunter | Security event logs | | |
| Windows.Forensics.Prefetch | Program execution | | |
| Windows.System.Pslist | Running processes | | |
| Windows.Network.Netstat | Network connections | | |

## Hunt Results
| Hunt ID | Description | Endpoints Hit | Matches |
|---------|-------------|---------------|---------|
| | | | |

## Key Findings
### Finding 1
- **Host:**
- **Artifact:**
- **Description:**
- **Severity:**
- **Evidence:**

## IOC Matches
| IOC Type | Value | Hosts Matched | Details |
|----------|-------|---------------|---------|
| | | | |

## Collection Issues
| Host | Issue | Resolution |
|------|-------|------------|
| | | |

## Recommendations
1.
2.
3.
