WHEN REPORTING AN INCIDENT, PLEASE SPECIFY

Send incident information via email to the incident reporting address.

• Basic contact information (name and organisation, email, phone);
• IP address and type of incident;
• the scan report must include the log portion containing the attack log;
• the spam or virus report must contain the complete unmodified header of the email concerned as spam or virus;
• a phishing or pharming report must include the URL and, if possible, the source page of the website;
• all reports must include the time zone to which all time stamps relate.

INCIDENT HANDLING

• Each incoming report is assigned a unique identifier and forwarded to the CSIRT team for processing.
• All further communication will always refer to this identifier.

The operation of CSIRT-BUT is carried out by authorised staff of the Center of Information Services of Brno University of Technology.