ATTACK INFORMATION
Malware Family:
GENERAL DETAILS
Incident ID:
Analysis Time:
Client Version:
PC Name:
Machine Type:
OS:
Machine Roles:
Domain:
IP Address:
User Name:
User SID:
Logon Time:
Logon Type:
Remote PC:
Remote IP:
DETECTION DETAILS
Description:
Protection Name:
Trigger Matched:
Trigger Time:
Trigger Actual:
Trigger Type:
Trigger Process:
Trigger PID:
Trigger Args:
Trigger App:
Trigger Rep:
Trigger MD5:
Mode:
Confidence:
Severity:
EMAIL DETAILS
Attachment:
Subject:
Email ID:
From:
To:
ATTACK STATS
remote (RDP)
logons
malicious
connections
suspicious
connections
unclassified
connections
malicious
processes
suspicious
processes
unclassified
processes
unsigned
processes
script
processes
windows os
processes
malicious
files
suspicious
files