Summary
What happened, affected scope, and current status.
Good cybersecurity work is not just finding an issue. It is explaining what happened, what evidence supports it, why it matters, what remains uncertain, and what should happen next.
The same structure improves incident reports, vulnerability findings, evidence notes, portfolio writeups, interview stories, and résumé bullets.
What happened, affected scope, and current status.
Sources, timestamps, assets, and confidence.
Meaning, ruled-out paths, assumptions, and gaps.
Specific next actions and validation evidence.
No source, scope, timeline, confidence, or next step. The reader cannot inspect the conclusion.
Five failed attempts from one source were followed by a successful login. The events are confirmed; user recognition and source ownership still require validation.
Build an incident report, vulnerability summary, evidence note, portfolio plan, and evidence-backed résumé bullet.