-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
I added a lot of examples of the folder structure and how the documents can look if the caputer templates are used. Of course this all meant to be flexible to anyone workflow. But having good examples to see is always a good idea.
- Loading branch information
1 parent
adab56c
commit 31cafc7
Showing
4 changed files
with
103 additions
and
2 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,40 @@ | ||
#+TITLE: | ||
#+AUTHOR: | ||
#+EMAIL: | ||
|
||
|
||
* Cases | ||
|
||
** Case Number#: 2023abd Date Created : 2023-01-10 | ||
*** Vendor | ||
Super Duper Cybers Corp. | ||
*** Title | ||
EDR broke compability with Windows 10 Version 21H2 | ||
*** Description | ||
We noticed issues with EDR endpoints when updating the database endpoint will lose internet. | ||
*** Notes | ||
:LOGBOOK: | ||
- Note taken on [2023-06-18 Sun 21:24] \\ | ||
Issue was first noticed when pushing updates to database | ||
:END: | ||
*** Questions | ||
1. Can the update be bad? | ||
2. Who was in charge of pushing out the update? | ||
*** Solutions [50%] | ||
- [X] Rollback update | ||
- [ ] Check for degradation | ||
|
||
*** Email/Chat Logs | ||
:LOGBOOK: | ||
- Note taken on [2023-06-18 Sun 21:26] \\ | ||
Me: What does boss say? | ||
Dude: The boss says to fix ASAP! | ||
:END: | ||
|
||
*** Debug/Troubleshooting Logs | ||
:LOGBOOK: | ||
- Note taken on [2023-06-18 Sun 21:27] \\ | ||
New DB version 2.5 | ||
- Note taken on [2023-06-18 Sun 21:27] \\ | ||
Old DB version 2.4 | ||
:END: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,38 @@ | ||
#+TITLE: | ||
#+AUTHOR: | ||
#+EMAIL: | ||
|
||
* Investigations | ||
** IN-PROGRESS Investigation#: Suspicious Powershell Command Date Created: 20230101 | ||
:properties: | ||
:export_file_name: 20230101_investigation_suspciouspowershell | ||
:end: | ||
*** Vendor | ||
Super Duper Cybers Corps. | ||
*** Title | ||
Suspicious Powershell Command Executed by Finance Department | ||
*** Assigned: | ||
Eduardo Robles | ||
*** Contacts | ||
- Cyber Team | ||
- Eduardo Robles | ||
*** Description | ||
Our IDR logged an a suspicious Powershell command executed from the Finance department. | ||
*** Questions | ||
1. Was this an intentional execution? | ||
2. What is the purpose of the Powershell command? | ||
3. Did anyone verify with I.T department regarding the Powershell command in question? | ||
*** Solutions [%] | ||
- [ ] Investigate the origin of the Powershell command | ||
- [ ] Speak with employee who's work station is in question and their supervisor | ||
- [ ] Flag the Powershell command as suspicious | ||
*** Notes | ||
:LOGBOOK: | ||
:END: | ||
*** Debug/Troubleshooting Logs | ||
:LOGBOOK: | ||
:END: | ||
*** Email/Chat Logs | ||
:LOGBOOK: | ||
|
||
:END: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,23 @@ | ||
#+TITLE: | ||
#+AUTHOR: | ||
#+EMAIL: | ||
|
||
* Projects | ||
** Execute Network Scan for Vulnerabilities | ||
:properties: | ||
:export_file_name: 2023_network-vuln-scan | ||
:end: | ||
*** Description | ||
Execute an NMAP on the network to find vulnerabilities | ||
*** Scope: [%] | ||
- [ ] Verify NMAP scan to find vulnerabilities | ||
- [ ] Talk to Network team | ||
- [ ] Talk to Administration/Management | ||
*** Solution: [%] | ||
- [ ] Scan the subnets provided by Network team | ||
- [ ] Skip the scanning of web vulnerabilities | ||
*** Notes | ||
:LOGBOOK: | ||
- Note taken on [2023-06-18 Sun 21:43] \\ | ||
Find the documentation for NMAP | ||
:END: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters