Web Application Attack Incident Report
General Information
Date of Incident
Reported By
Application Name
Application URL
Incident Details
Incident Summary
Date & Time Detected
Detection Method
Affected Components/Modules
Attack Type (e.g., XSS, SQL Injection, CSRF, etc.)
Technical Details
Detailed Description of Attack
Attack Vectors Used
Attack Source (IP, User Account, etc.)
Compromised Data (if any)
Impact Assessment
Impact Summary
Affected Users
Business Impact
Response Actions
Incident Containment Actions
Eradication & Recovery Actions
Mitigation Steps Implemented
Lessons Learned & Recommendations
Root Cause Analysis
Recommendations/Preventive Measures
Report Prepared By
Name
Date