Lesson 12 of 12 · Final project
Final project: investigating a compromised server end to end
Objective
Run alone, in two hours as in the exam, the full investigation of a compromised server: from collection to the report, through triage, logs, persistence, timeline and chain of custody. Everything happens on a harmless reconstruction of incident INC-2026-0207.
This lesson is part of the full course
Unlock Linux Incident Response and Digital Forensics to read every lesson, do the exercises, access the simulations and earn your certificate.
Already enrolled? Log in.