I reviewed ticket # INC000010068040. Upon first glance, I noticed no indicators listed. This would be my reasoning for classifying the incident at a CAT-05 and resolve because multiple users were receiving and opening attachments, phishing. However, I needed a second opinion and asked Blair to review the ticket and maybe he might see an indicator that Paul and I have missed. Blair noted the “Custom bat script” in the notes section is the indicator.
In addition, Jeff Rabinovitz noted,” The recovery time was also set to extended on this particular ticket.” From my knowledge, if there are no indicators, we resolve for CAT-05. When no indicators are present, whether the impacted is 0 or 100 and recoverability is N/A, not recoverable, extended,
In addition, Jeff Rabinovitz noted,” The recovery time was also set to extended on this particular ticket.” From my knowledge, if there are no indicators, we resolve for CAT-05. When no indicators are present, whether the impacted is 0 or 100 and recoverability is N/A, not recoverable, extended,