Log hunt
Something happened on this server. The log saw it all. Filter the lines, pin the ones that matter and answer the questions, the way a SOC analyst works through an incident.
Practice for defenders. This lab trains the skills SOC analysts, incident responders and sysadmins use to protect systems. Everything runs in your browser. The companies, people, data and IP addresses are made up, and nothing here touches a real system. Only use security skills on systems you own or have written permission to test.