Incident Reporting

Examples of suspicious activity

• Unknown activity related to your account or computing services
• Log discrepancies
• Social engineering attempts
• Unfamiliar user accounts or files
• Unexpected system ports or processes
• Modification or deletion of data
• Changes in file or directory permissions
• Denial of service without obvious explanation
• Threats or harassment via email

If you suspect a security violation has occurred, contact your IT help desk right away. If confidential or sensitive data is associated with any computer involved in the incident, please call Cybersecurity immediately at 940-369-7800 or contact us by email.

Refrain from accessing or further interacting with the computer in question. This will help preserve evidence integrity before the Cybersecurity team can collect an image for forensic analysis.

Incident reporting steps

• Notify your IT help desk or IT support staff
• Notify your immediate supervisor
• Do not allow any changes to be made to the computer or related system.

If you wish to report criminal activity, contact your campus Police Department

• UNT Police Department 940-565-3000
• HSC Police Department 817-735-2210 (non-emergency number)
• UNT Dallas Police Department 972-780-3009

Information to provide when reporting an incident

• Your name, phone number, email address, and department (if applicable)
• Contact information for anyone else directly involved, especially if someone else reported this incident to you
• Date, time, and location of incident
• Description of the incident, including as much technical detail as possible
• Any relevant documentation or logs