Analyze Log Files for Malicious Activity

Guided

Part of CompTIA Security+ Core Skills Topic: Cyber Security Labs

Counts towards

Access

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, you will search for indicators of malicious activity.

Investigate service restart actions
Look for failed SSH connection attempts
Check log files to determine which user installed malware
Investigate a locked user account that may have been targeted by a brute force attack

Note: Once you begin the lab, you will not be able to pause, save, or exit and then return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.

⏱ About 30 minutes
Counts towards: CompTIA Security+ (exam SY0-701)

Roadmaps that use this lab

CompTIA Security+ (SY0-701) — step 8: Guided labs written for SY0-701
SOC Analyst — career path — step 2: Security foundation
Penetration Tester — career path — step 1: Security foundation
Threat Hunter — career path — step 1: Security foundation
Digital Forensics Analyst — career path — step 1: Security foundation
Threat Intelligence Analyst — career path — step 1: Security foundation
Cloud Security Engineer — career path — step 1: Security foundation
Security Engineer — career path — step 1: Security foundation
Security Architect — career path — step 1: Security foundation
Network Security Engineer — career path — step 3: Security foundation
Security Administrator — career path — step 3: Security foundation
Cyber Security Manager — career path — step 1: Security foundation
Cyber Security Risk Manager — career path — step 1: Security foundation
Cyber Security Compliance Officer — career path — step 1: Security foundation
AI Security Engineer — career path — step 1: Security foundation