Ransomware Event Documentation Form
Reported By
Date of Event
Time of Event
Department/Location
Contact Email or Phone
Event Details
Description of Ransomware Event
How was it detected?
Systems/Files Impacted
Ransom Note Details/Message
File Extensions Added (if any)
Actions Taken
Systems Isolated (list/computer names)
Other Actions Taken
Notifications
Who was Notified
Additional Information