Create 10-reporting-and-lessons-learned.md

Author: ngvuthdanhh

notes/10-reporting-and-lessons-learned.md

@@ -0,0 +1,15 @@
+# 10 – Reporting & Lessons Learned
+
+## Reporting in DFIR
+A strong report includes:
+- Summary of incident  
+- Evidence used  
+- Timeline of events  
+- Impact analysis  
+- Recommendations  
+
+## Lessons Learned
+- Improve detection  
+- Patch systemic issues  
+- Update policies  
+- Strengthen defenses