In our experience working through real world Incidents with DC3, you only need to provide them the information about the confirmed or potential Indicators of Compromise.

Information about the hackers Tools, Techniques, and Procedures (TTP); business impacts; data exfiltration; and remediation efforts can be provided in your final report.

DC3 does like to get your list on DoD contracts as soon as possible.

For more information about our Incident Response Services, please go to our CMMC Incident Response page.