Blue Team Lab — HackerSkool

GUIDED CYBER LAB

0 / 3 STEPS

This terminal is a controlled HackerSkool simulator. Commands are checked against this training mission and are not executed on the web server.

CURRENT OBJECTIVE

Capture suspicious lab traffic.

ENTER: tcpdump -i eth0 -c 10 -w incident.pcap

LOCKED

Analyze the capture with Snort.

ENTER: snort -A console -r incident.pcap -c /etc/snort/snort.conf

LOCKED

Inspect related processes.

ENTER: ps aux

student@hackerskool-lab

HackerSkool cyber lab initialized. Ishure Hackalot online. Explore the machine, complete the mission, or ask for something in plain English. Type 'help' anytime.

FINAL KNOWLEDGE CHECK

Why combine IDS alerts with host evidence?

☠

MISSION COMPLETE

Blue Team Lab passed

Your progress has been saved in this browser.

RETURN TO COURSE