Suspicious Message Evidence Record

Evidence question	Observation
What is the message asking the recipient to do?
Was the request expected?
What identity is claimed?
What pressure, authority, fear, curiosity, or reward is used?
What information, money, access, or approval could be exposed?
What destination or attachment is involved?
How can the request be verified independently?
What is the reporting path?
What facts remain unknown?

Decision: Complete in the editable or printed copy.
Reasoning: Complete in the editable or printed copy.
Action after an accidental click or disclosure: Complete in the editable or printed copy.

Source and use

The Complete Cybersecurity Educator · Dr. Jason Edwards. Editable companion - Worksheet 2 - Suspicious Message Evidence Record.

Please do not resell this resource. You may repost or share it with other educators; keep the Bare Metal Cyber Educators Hub URL and source attribution intact. See the companion permissions. Use fictional or appropriately authorized material and follow the safety guidance in each resource.