Lesson 10 of 12 · Obligations and real cases
Real case: cryptocurrency mining on an exposed server
Objective
Run the full investigation of the Web's most common incident: a server whose CPU is stuck at 100% because a cryptocurrency miner has settled in. You find the process, its connection, its persistence and above all how it got in, then clean up properly.
A typical public incident, rewritten for MasterLinux. Any resemblance of names, IPs or wallets is fictitious; the lab artifacts are simulated and harmless.
This lesson is part of the full course
Unlock Linux Incident Response and Digital Forensics to read every lesson, do the exercises, access the simulations and earn your certificate.
Already enrolled? Log in.