Home / Labs / Map the User Sessions

Map the User Sessions

You just SSH'd into a possibly compromised server. Check who else is here right now.

Open this lab

Commands practised here

• whoShows all logged-in users with terminals and times.
• idShows your user and group IDs.
• wShows users with what they are doing right now.

Nearby labs

• All labsBrowse the full list.
• Exam prepWhich exams these objectives map to.
• Threat Hunter: Timeline Reconstruction
• Enumerate the Users