Reporting

Aftermath doesn't just help you investigate. It helps you show what happened.

A branded, exportable record of a session — Pro and Max tiers — for the ticket, the client, or your own record.

01
What's in it

Everything the session actually found and did.

  • SummaryThreats found, items quarantined, when the session ran.
  • FindingsEvery detection Defender caught, with what Aftermath found alongside it.
  • Actions takenWhat moved to quarantine, and when.
  • BrandingA clean, exportable PDF — something you can actually hand to a client or attach to a ticket.

Aftermath — Session Report

Generated 5:02 PM
Summary
Threats found2
Items quarantined3
MachineBACKOFFICE-01
Findings
Trojan:Win32/Phonzy.A!mlRemoved
Trojan:Win32/MalgentRemoved
Actions taken
Quarantine — RunOnce entry10:41 AM
Quarantine — scheduled task10:42 AM
02
02
Why it matters

Close the ticket

Attach a real record instead of a note that says "fixed."

Hand it to a client

A branded document that shows exactly what was found and removed.

Keep your own record

Something to check against if the same machine comes back later.

03

Included on Pro and Max.

Free and Plus cover investigation and cleanup. Reporting is part of what Pro adds, alongside scheduled Drift baselines and unlimited history.

Turn your next cleanup into a record you can hand over.

Get Pro Start with Free