| Do you notice any unusual use of accounts? |
|
| If yes, give a short description. For example, unknown accounts, after-hours login times, remote or local login? |
|
| |
| Are any files missing or altered or added? |
|
| If yes, give a short description. For example, configuration files, system or user files, or location in file system. |
|
| |
| What other unusual activity have you noticed? Please give a short description. For example, reboot of system, loss of performance, unknown processes. |
|
|
| Do you notice any unusual entries in the log file(s)? |
|
| If yes, give a short description. For example, log entries that specify a security violation or invalid login. All logs must include the time and date relative to GMT. |
|
| |
| What is the network or system domain and/or IP address? |
|
| |
| What type of system? Please list operating system, relevant hardware and connection methods. |
|
| |
| Are you a customer of BT Infonet? |
|
| |
| When was the incident first discovered? |
| |
|
| |
|
|
|
|
|
| |
| How many users are affected? |
|
| |
| If possible, request estimate dollar loss: equipment, work hours, software, accounts affected. |
$ |
| |
| Was/is classified or national security information put at risk by this compromise, or is this a case of possible corporate espionage, or an incident involving a financial institution? |
|
| |
| Has any law enforcement agency been notified of this incident? |
|
| |
| What actions are you requesting from BT Infonet? |
|
| |