DJN2: Incident Response Incident Reporting Template
WGU D483 DJN2: Incident Response
Reporting Template & Lessons Learned |
2026 Update with complete solutions.
| Incident Reporting Template
SECTION A: INCIDENT DETAILS
Incident number(s): HDE-1001, HDE-1050, HDE-1072
Incident date(s): 13 DEC
Report author:
Report date: 04/23/24
Summary of incident: Multiple users have reported experiencing slow application
response as well as time out errors with the Pro-Engineer
application.
Impacted system(s): WIN-6JNN6RLT6IL
Primary function of the Application Server
impacted system(s):
Impacted user(s): Maya Patel, Diego Martin, Alex Lee
Incident timeline: 13 DEC 10:00 a.m., 13 DEC 3:14 p.m., 13 DEC 3:20 p.m.
Functional impact:
(See section: Glossary) ☐HIGH ☒MEDIUM ☐LOW ☐NONE
Incident priority:
☒HIGH ☐MEDIUM ☐LOW
Additional notes: An administrator on the applications team applied updates
to the server without first verifying the source of the
updates. The updates were delivered via spoofed email to
give the appearance that they were from the trusted
source that usually provides updates. I suspect that these
updates contain malware which is causing high system
utilization and latency for the impacted users.
Incident type: (check all that apply)
PAGE 1
WGU D483 DJN2: Incident Response
Reporting Template & Lessons Learned |
2026 Update with complete solutions.
| Incident Reporting Template
SECTION A: INCIDENT DETAILS
Incident number(s): HDE-1001, HDE-1050, HDE-1072
Incident date(s): 13 DEC
Report author:
Report date: 04/23/24
Summary of incident: Multiple users have reported experiencing slow application
response as well as time out errors with the Pro-Engineer
application.
Impacted system(s): WIN-6JNN6RLT6IL
Primary function of the Application Server
impacted system(s):
Impacted user(s): Maya Patel, Diego Martin, Alex Lee
Incident timeline: 13 DEC 10:00 a.m., 13 DEC 3:14 p.m., 13 DEC 3:20 p.m.
Functional impact:
(See section: Glossary) ☐HIGH ☒MEDIUM ☐LOW ☐NONE
Incident priority:
☒HIGH ☐MEDIUM ☐LOW
Additional notes: An administrator on the applications team applied updates
to the server without first verifying the source of the
updates. The updates were delivered via spoofed email to
give the appearance that they were from the trusted
source that usually provides updates. I suspect that these
updates contain malware which is causing high system
utilization and latency for the impacted users.
Incident type: (check all that apply)
PAGE 1
