Ransomware Incident Documentation

Incident Identification

Date & Time Detected Reported By Suspected Method of Infection

System & Impact

Affected Systems Scope of Impact

Ransomware Details

Ransomware Variant (if known) Ransom Note Content Ransom Amount Requested

Actions Taken

Containment Steps Eradication Steps Recovery Steps

Additional Notes

Notes / Observations