Log Analysis
SOC flagged suspicious SSH activity. Analyze the authentication log to identify the attacker and scope of the breach.
Commands practised here
grep <pattern> <file>Searches for lines containing a pattern.grep -c <pattern> <file>Counts matching lines.grep -i <pattern> <file>Case-insensitive search.
Nearby labs
- All labsBrowse the full list.
- Exam prepWhich exams these objectives map to.
- Triage the Drop
- Look Inside