Under attack? Start here.

1. Website or service under attack

Start with Sam to organize the affected service, symptoms, start time and impact. Use Knowledge to investigate the relevant attack technique, then record the decisions and changes in Your records.

1. Sam: prepare a brief using sanitized errors, traffic patterns and recent changes. Ask the AI guide for questions to check and next steps to review with your incident lead. Keep credentials and sensitive logs out of the conversation.
2. Knowledge: examine Network Denial of Service (T1498), its sources and related techniques. Compare the reference with your observations; a slow site alone does not establish an attack.
3. Your records: keep a timeline of impact, containment decisions, changes and recovery checks. Apply protective changes through the systems you are authorized to administer, with your response team.

Mithril supports investigation and response planning here. These products do not automatically block traffic, change your firewall or restore a service. Your authorized team carries out and verifies mitigation.

2. Hacked account or scam

Use YABAI to look up suspicious domains and read the published findings and sources. Phishing check compares a domain with a loaded phishing snapshot. Sam can help organize your situation, and Your records keeps the timeline you choose to save.

1. Check the domain without opening the suspicious link. YABAI contains investigated public observations; absence from a catalog is not proof of safety. If the phishing snapshot is unavailable, the check cannot give a verdict.
2. Stop further payments. If money was lost, contact your bank or payment provider immediately through its official app or the number on your card. Use the affected service’s account recovery settings; never give Sam a password, verification code or private key.
3. Use Your records to organize dates, suspicious domains, messages and payment references. Keep original files yourself, then use the contact directory when you are ready to report.

3. Your records: keep a timeline, at your pace

Start a text draft without an account. It stays in this browser and is not sent until you choose to save it to your account. On a shared device, empty both draft fields when you finish. Keep original files yourself; this step records text and an evidence list.