The Blue Team's War Room (Incident Response Exercise)

This thread hosts the "War Room" for the Incident Response Exercise that is part of your final project for this course.

This week your focus should be on documenting the incident at Sifers-Grayson (the Red Team's successful intrusions and penetration of the networks and IT systems). As you pull together information, post it here just as you would share information with the other members of the Incident Response "Blue Team."

Remember that you are earning points towards your final grade for your contributions to this week's Blue Team War Room. You must post a contribution before you can join in on the discussions and benefit from the joint incident analysis.

You can and should use information from the messages posted here as part of the incident response report which you will submit as your final project for this course.