National Computer Board

CERT - MU

Incident Reporting Form

* are mandatory fields and need to be filled

1. Contact Information of Reporting Party:

Title * Organisation
Name * Position/Post
Address * Nationality Mauritian Others
Mobile No
Telephone No * Fax No
Email *  

2. Sector of Reporting Party: *


Government
Private Organisation
Individual

3. Location of Affected Computer/Network:

Location

4. Date and Time Incident Occurred:

Date (dd/mm/yyyy):       Time (HH:MM):

5. Symptoms of Incident:

System crashes Operation of a program or sniffer device to capture network traffic
New user accounts/ Accounting discrepancies Unusual time of usage
Failed or successful social engineering attempts An indicated last time of usage of a user account that does not correspond to the     actual last time of usage for that user
New files Unusual usage patterns
Changes in file lengths or dates A system alarm or similar indication from an intrusion detection tool
Attempts to write to system Unusual log file entries
Data modification or deletion Presence of new setuid or setgid files
Denial of service Altered home pages, which are usually the intentional target for visibility, or other pages on the Web server
Unexplained, poor system performance Presence of cracking utilities
Anomalies Activity during non-working hours or holidays
Suspicious probes/Scanning Unaccounted for changes in the DNS tables, router rules, or firewall rules
Suspicious browsing Unexplained elevation or use of privileges
Others (Specify)

6. Type of Incident: *

Phishing Email Spoofing
Virus / Malicious Code Denial of Service
Web Site Defacement Hacked Account
Intrusion Fake Profile
Spam Identity Theft
Sextortion Online Harassment
Others (Specify )

7. Description of Incident: *


8. Please submit any information such as logs, IP address/MAC address of affected machine or any other information (N.B: Logs are mandatory in case of scanning incidents):

Logs: (Max file size 5 MB)

9. Agencies Notified?

Cyber Crime Unit IT Police Unit Affected Product Vendor Other

Incident Reporting Form: version 1.0