mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-25 22:00:58 +03:00
55 lines
1.2 KiB
Markdown
55 lines
1.2 KiB
Markdown
# Velociraptor IR Collection Report Template
|
|
|
|
## Case Information
|
|
| Field | Details |
|
|
|-------|---------|
|
|
| Case ID | |
|
|
| Velociraptor Server | |
|
|
| Collection Start | |
|
|
| Collection End | |
|
|
| Lead Analyst | |
|
|
| Endpoints Targeted | |
|
|
| Endpoints Collected | |
|
|
|
|
## Collection Scope
|
|
### Target Endpoints
|
|
| Hostname | IP Address | OS | Client ID | Status |
|
|
|----------|-----------|-----|-----------|--------|
|
|
| | | | | |
|
|
|
|
### Artifacts Collected
|
|
| Artifact | Description | Endpoints | Events |
|
|
|----------|-------------|-----------|--------|
|
|
| Windows.EventLogs.EvtxHunter | Security event logs | | |
|
|
| Windows.Forensics.Prefetch | Program execution | | |
|
|
| Windows.System.Pslist | Running processes | | |
|
|
| Windows.Network.Netstat | Network connections | | |
|
|
|
|
## Hunt Results
|
|
| Hunt ID | Description | Endpoints Hit | Matches |
|
|
|---------|-------------|---------------|---------|
|
|
| | | | |
|
|
|
|
## Key Findings
|
|
### Finding 1
|
|
- **Host:**
|
|
- **Artifact:**
|
|
- **Description:**
|
|
- **Severity:**
|
|
- **Evidence:**
|
|
|
|
## IOC Matches
|
|
| IOC Type | Value | Hosts Matched | Details |
|
|
|----------|-------|---------------|---------|
|
|
| | | | |
|
|
|
|
## Collection Issues
|
|
| Host | Issue | Resolution |
|
|
|------|-------|------------|
|
|
| | | |
|
|
|
|
## Recommendations
|
|
1.
|
|
2.
|
|
3.
|