Case CASE-2397

Back to Cases
High PriorityActive
CASE-2397

Investigation Case CASE-2397

Export PDF Report
InvestigatorAdmin User
Case CategoryDigital Forensics
Created Date2025-07-20
Evidence Items2 artifacts

Summary & Initial Findings

Detailed digital evidence analysis and forensic investigation report for case identifier CASE-2397.

Recommended Action Items

  • Isolate affected host machine from domain network.
  • Revoke active session tokens for compromised user account.
  • Block C2 IP addresses in gateway firewall policy.