Windows Incident Response Checklist Form
Use this Windows Incident Response Checklist Form to document and track a Windows security incident from detection through containment, eradication, recovery, and closure.
Incident Title
*
Date and Time Detected
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Hour Minutes
AM
PM
AM/PM Option
Incident Category
*
Please Select
Malware
Unauthorized Access
Phishing
Data Breach
Denial of Service
Other
Affected System or Asset
*
Initial Detection Details
*
Containment Actions Taken
Eradication and Recovery Actions
Current Status
*
Please Select
Detection
Containment
Eradication
Recovery
Closed
Assigned Team Member
Lessons Learned or Additional Notes
Submit Incident Report
Should be Empty: