- Objective:
- Hey, I was tasked to do X, Y, Z
- Findings:
- This is what I found
- High level overview:
- Did I find a name, username, emails, social media
- Technical findings:
- Need to give them basically step by step that law enforcement could follow and end up with the same results
- Pictures and details make it easier (imo)
https://academy.tcm-sec.com/courses/1214089/lectures/27235627
- While finding accounts and you’re not sure if they’re that person or not, take a note and figure out later.
- If it’s not that person, then it does not belong on the report
- no “we found this account but it ended up not being that person”
- If we can’t figure out, we can say “we don’t have enough information to rule out this account, but it’s possible it’s tied to this person”
- Basically what details you need to include for someone to reach the same information you reached and tie them all together to that person