Incident desk, staffed 24/7/365

Report an incident.

Tell the incident desk who you are, what you are seeing and the best number to reach you. A response lead will call you back and, if needed, begin containment advice on the same call.

Active incident

Incident report

All fields are required so that a responder can reach you without delay. Nothing you write here is stored outside our incident mailbox.

Prefer email? Write to dfir@aureonintelgroup.com.

What happens now

Responders, not a call centre

Staffed 24/7/365 by responders.
First senior responder engaged within the hour.
Containment advice starts on the first call, before any paperwork.
Insurers, brokers and counsel may instruct us directly on behalf of an insured.

While you wait: do not power off encrypted or suspicious systems, do not restore from backups yet, preserve logs, and limit communication about the incident to trusted channels that the attacker may not control.

Not an emergency? Talk to an expert or use the general contact form.

What happens next

From first contact to engagement.

Scoping call

A senior practitioner discusses your situation, constraints and objectives. For incidents, this is where containment advice begins.

Proposal or activation

Project work receives a scoped proposal with deliverables and timeline. Incidents are activated under emergency terms or an existing retainer or panel agreement.

Delivery

A named lead runs the engagement with regular written updates and a single point of accountability.

Closure

Reports delivered, findings walked through with your teams and stakeholders, and next steps agreed.