Ctrl + K
CM

Incident Management

Home  ›  Incident Management
24 May 2025 256709:32 AM
Open Incidents
27
8 vs last month
Critical Incidents
7
2 vs last month
MTTR
4h 32m
1h 12m vs last month
Incidents This Month
46
15% vs last month
Containment Success Rate
93.6%
5.2% vs last month
Lessons Learned Closed
18
6 vs last month

Quick Actions

1.Incidents by Severity

  • Critical7 (25.9%)
  • High9 (33.3%)
  • Medium7 (25.9%)
  • Low3 (11.1%)
  • Informational1 (3.7%)

2.Incident Trend (Last 30 Days)

  • Opened
  • Closed

3.Incidents by Attack / Source Category

Malware / Ransomware
9 (33%)
Phishing / Social Engineering
6 (22%)
Unauthorized Access
5 (19%)
Vulnerability Exploitation
4 (15%)
Insider Threat
2 (7%)
Other
1 (4%)
0246810

4.SLA Compliance

  • On Time22 (81%)
  • Breached3 (11%)
  • At Risk2 (8%)

5.Recent Incidents

INC-2025-0047 Ransomware activity detected on file server Critical 18m ago
INC-2025-0046 Phishing email with credential harvesting link High 2h ago
INC-2025-0045 Multiple failed login attempts - brute force Medium 5h ago
INC-2025-0044 Suspicious outbound traffic detected Low 9h ago
INC-2025-0043 Unusual admin privilege escalation High 12h ago

6.Root Cause Summary (Last 30 Days)

  • Human Error14 (30%)
  • Social Engineering10 (22%)
  • System / Config Issue9 (20%)
  • Vulnerability8 (17%)
  • Malicious Activity5 (11%)

7.Response Activity Timeline

Investigation started
INC-2025-0047 · Ransomware activity detected on file server
09:14 AM
Containment actions executed
INC-2025-0047 · Endpoint isolated, process terminated
09:21 AM
Evidence collected
INC-2025-0047 · Memory dump, logs, artifacts
09:28 AM
Incident escalated to Tier 2
INC-2025-0047 · Escalated by John Smith
09:29 AM

8.Incident Register

Incident IDTitleCategorySeverityAffected AssetOwnerReported TimeDue TimeStatusActions
INC-2025-0047Ransomware activity detected on file serverMalware / RansomwareCriticalFS-01 (File Server)
SL
Sophia Lee
24 May 2025 09:14 AM24 May 2025 01:14 PMInvestigating
INC-2025-0046Phishing email with credential harvesting linkPhishing / Social EngineeringHighEmail Gateway
DK
Daniel Kim
24 May 2025 07:28 AM24 May 2025 11:28 AMIn Progress
INC-2025-0045Multiple failed login attempts - brute forceUnauthorized AccessMediumVPN Gateway
AP
Arjun Patel
24 May 2025 04:02 AM24 May 2025 10:02 AMInvestigating
INC-2025-0044Suspicious outbound traffic detectedVulnerability ExploitationLowWEB-02 (Web Server)
MT
Maya Tan
23 May 2025 11:45 PM24 May 2025 05:45 AMMonitoring
INC-2025-0043Unusual admin privilege escalationInsider ThreatHighAD-01 (Domain Controller)
JS
John Smith
23 May 2025 09:12 PM24 May 2025 01:12 AMEscalated
Rows per page:1-10 of 27